Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: C. Mobile forensics
Explanation:
The correct answer is Mobile forensics. It means recovering and analyzing evidence from mobile phones and tablets.
Choose an option to check your answer.
Correct Answer: C. Network forensics
Explanation:
The correct answer is Network forensics. It means capturing and analyzing network traffic for evidence or intrusion detection.
Choose an option to check your answer.
Correct Answer: B. Computer forensics
Explanation:
The correct answer is Computer forensics. It means analysis of desktops, laptops, servers, and storage devices.
Choose an option to check your answer.
Correct Answer: B. Incident artifact
Explanation:
The correct answer is Incident artifact. It means a digital trace such as log entry, file, registry key, or network record.
Choose an option to check your answer.
Correct Answer: C. Forensic soundness
Explanation:
The correct answer is Forensic soundness. It means following methods that preserve evidence reliability and admissibility.
Choose an option to check your answer.
Correct Answer: A. Hash verification
Explanation:
The correct answer is Hash verification. It means using cryptographic hashes to prove evidence copies match originals.
Choose an option to check your answer.
Correct Answer: B. Timeline analysis
Explanation:
The correct answer is Timeline analysis. It means organizing digital events by time to reconstruct activity.
Choose an option to check your answer.
Correct Answer: B. Volatile data
Explanation:
The correct answer is Volatile data. It means temporary data that may disappear when power is lost.
Choose an option to check your answer.
Correct Answer: C. Write blocker
Explanation:
The correct answer is Write blocker. It means a tool that prevents changes to original storage media during acquisition.
Choose an option to check your answer.
Correct Answer: C. Forensic image
Explanation:
The correct answer is Forensic image. It means a bit-by-bit copy of storage media used for analysis.
Choose an option to check your answer.
Correct Answer: A. Chain of custody
Explanation:
The correct answer is Chain of custody. It means documented history of evidence handling and transfer.
Choose an option to check your answer.
Correct Answer: B. Evidence integrity
Explanation:
The correct answer is Evidence integrity. It means ensuring evidence is not altered during handling or analysis.