Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: A. Showing relationships between entities such as accounts, devices, and events.
Explanation:
Graphing evidence refers to showing relationships between entities such as accounts, devices, and events.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling forensic report.
Choose an option to check your answer.
Correct Answer: A. Documented steps that guide consistent forensic work.
Explanation:
Standard operating procedure refers to documented steps that guide consistent forensic work.
Choose an option to check your answer.
Correct Answer: A. To support relationship visualization during an investigation.
Explanation:
The purpose of graphing evidence is connected with relationship visualization, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling identification phase.
Choose an option to check your answer.
Correct Answer: A. A specialist who explains technical findings to legal or organizational audiences.
Explanation:
Expert witness refers to a specialist who explains technical findings to legal or organizational audiences.
Choose an option to check your answer.
Correct Answer: A. To support repeatable process during an investigation.
Explanation:
The purpose of standard operating procedure is connected with repeatable process, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling graphing evidence.
Choose an option to check your answer.
Correct Answer: A. Gathering evidence using approved and documented methods.
Explanation:
Collection phase refers to gathering evidence using approved and documented methods.
Choose an option to check your answer.
Correct Answer: A. To support technical evidence communicator during an investigation.
Explanation:
The purpose of expert witness is connected with technical evidence communicator, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling standard operating procedure.
Choose an option to check your answer.
Correct Answer: A. Any system, device, log, file, or service that may contain relevant evidence.
Explanation:
Data source refers to any system, device, log, file, or service that may contain relevant evidence.
