Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: A. Data left by mobile or desktop applications, such as caches and logs.
Explanation:
App artifacts refers to data left by mobile or desktop applications, such as caches and logs.
Choose an option to check your answer.
Correct Answer: A. To support browser evidence trace during an investigation.
Explanation:
The purpose of cookie artifact is connected with browser evidence trace, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling data wiping.
Choose an option to check your answer.
Correct Answer: A. Determining potential sources and scope of digital evidence.
Explanation:
Identification phase refers to determining potential sources and scope of digital evidence.
Choose an option to check your answer.
Correct Answer: A. To support application evidence traces during an investigation.
Explanation:
The purpose of app artifacts is connected with application evidence traces, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling cookie artifact.
Choose an option to check your answer.
Correct Answer: A. Difficulty caused when evidence is protected by cryptographic methods.
Explanation:
Encryption challenge refers to difficulty caused when evidence is protected by cryptographic methods.
Choose an option to check your answer.
Correct Answer: A. To support evidence source discovery during an investigation.
Explanation:
The purpose of identification phase is connected with evidence source discovery, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling app artifacts.
Choose an option to check your answer.
Correct Answer: A. Locally stored web or app data that may reveal previously accessed content.
Explanation:
Cache artifact refers to locally stored web or app data that may reveal previously accessed content.
Choose an option to check your answer.
Correct Answer: A. To support access limitation during an investigation.
Explanation:
The purpose of encryption challenge is connected with access limitation, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Investigating evidence stored or processed in cloud environments.
Explanation:
Cloud forensics refers to investigating evidence stored or processed in cloud environments.
