Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling graphing evidence.
Choose an option to check your answer.
Correct Answer: A. To support relationship visualization during an investigation.
Explanation:
The purpose of graphing evidence is connected with relationship visualization, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Showing relationships between entities such as accounts, devices, and events.
Explanation:
Graphing evidence refers to showing relationships between entities such as accounts, devices, and events.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling data visualization.
Choose an option to check your answer.
Correct Answer: A. To support visual evidence analysis during an investigation.
Explanation:
The purpose of data visualization is connected with visual evidence analysis, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Representing forensic data through charts, graphs, or timelines to support interpretation.
Explanation:
Data visualization refers to representing forensic data through charts, graphs, or timelines to support interpretation.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling utc timestamps.
Choose an option to check your answer.
Correct Answer: A. To support consistent time comparison during an investigation.
Explanation:
The purpose of utc timestamps is connected with consistent time comparison, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Standard time references useful for comparing logs from different locations.
Explanation:
UTC timestamps refers to standard time references useful for comparing logs from different locations.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling time synchronization.
Choose an option to check your answer.
Correct Answer: A. To support timeline accuracy during an investigation.
Explanation:
The purpose of time synchronization is connected with timeline accuracy, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Aligning timestamps across systems to support accurate event reconstruction.
Explanation:
Time synchronization refers to aligning timestamps across systems to support accurate event reconstruction.
