All MCQs

Unallocated space may contain remnants of deleted files.

Professional reports should include limitations and confidence boundaries.

Network metadata can identify endpoints involved in communication.

SOPs support consistency and defensibility.

Encryption can limit access to stored evidence.

Graph visualization can show relationships among entities.

Multiple sources may preserve social media evidence.

Steganography hides data inside other media.

Investigators should stay within legal authority and scope.

Integrity and custody documentation support reliability.

Isolation helps safely observe suspicious behavior.

Readiness prepares the organization for future investigations.