Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: A. To support evidence tracking during an investigation.
Explanation:
The purpose of chain of custody is connected with evidence tracking, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling md5/sha hashing.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling chain of custody.
Choose an option to check your answer.
Correct Answer: A. Keeping evidence unchanged so that it remains reliable and admissible.
Explanation:
Evidence preservation refers to keeping evidence unchanged so that it remains reliable and admissible.
Choose an option to check your answer.
Correct Answer: A. To support maintaining integrity during an investigation.
Explanation:
The purpose of evidence preservation is connected with maintaining integrity, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling evidence preservation.
Choose an option to check your answer.
Correct Answer: A. A device or method used to prevent changes to original storage media.
Explanation:
Write blocker refers to a device or method used to prevent changes to original storage media.
Choose an option to check your answer.
Correct Answer: A. To support evidence protection during an investigation.
Explanation:
The purpose of write blocker is connected with evidence protection, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling write blocker.
Choose an option to check your answer.
Correct Answer: A. A bit-by-bit copy of storage media used for analysis instead of the original.
Explanation:
Forensic image refers to a bit-by-bit copy of storage media used for analysis instead of the original.
Choose an option to check your answer.
Correct Answer: A. To support exact evidence copy during an investigation.
Explanation:
The purpose of forensic image is connected with exact evidence copy, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling forensic image.
