Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: A. Data that remains after power is removed, such as files on a hard drive.
Explanation:
Non-volatile data refers to data that remains after power is removed, such as files on a hard drive.
Choose an option to check your answer.
Correct Answer: A. To support signature-based recovery during an investigation.
Explanation:
The purpose of file carving is connected with signature-based recovery, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling registry analysis.
Choose an option to check your answer.
Correct Answer: A. A fixed-length digital fingerprint used to verify data integrity.
Explanation:
Hash value refers to a fixed-length digital fingerprint used to verify data integrity.
Choose an option to check your answer.
Correct Answer: A. The scientific process of identifying, preserving, analyzing, and presenting digital evidence.
Explanation:
Digital forensics refers to the scientific process of identifying, preserving, analyzing, and presenting digital evidence.
Choose an option to check your answer.
Correct Answer: A. To support integrity verification during an investigation.
Explanation:
The purpose of hash value is connected with integrity verification, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. To support evidence-based investigation during an investigation.
Explanation:
The purpose of digital forensics is connected with evidence-based investigation, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling hash value.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling digital forensics.
Choose an option to check your answer.
Correct Answer: A. A hashing technique used to detect whether evidence has changed.
Explanation:
MD5/SHA hashing refers to a hashing technique used to detect whether evidence has changed.
Choose an option to check your answer.
Correct Answer: A. The documented history of evidence handling from collection to court presentation.
Explanation:
Chain of custody refers to the documented history of evidence handling from collection to court presentation.
Choose an option to check your answer.
Correct Answer: A. To support integrity checking during an investigation.
Explanation:
The purpose of md5/sha hashing is connected with integrity checking, not with altering or avoiding evidence procedures.
