All MCQs

Forensic work requires documentation and preservation of evidence integrity, especially when handling identification phase.

The purpose of identification phase is connected with evidence source discovery, not with altering or avoiding evidence procedures.

Identification phase refers to determining potential sources and scope of digital evidence.

Forensic work requires documentation and preservation of evidence integrity, especially when handling investigation methodology.

The purpose of investigation methodology is connected with systematic investigation approach, not with altering or avoiding evidence procedures.

Investigation methodology refers to a structured process for planning, collecting, analyzing, and reporting evidence.

Forensic work requires documentation and preservation of evidence integrity, especially when handling incident response relation.

The purpose of incident response relation is connected with investigative support, not with altering or avoiding evidence procedures.

Incident response relation refers to digital forensics supports incident response by identifying facts and preserving evidence.

Forensic work requires documentation and preservation of evidence integrity, especially when handling forensic readiness.

The purpose of forensic readiness is connected with investigation preparedness, not with altering or avoiding evidence procedures.

Forensic readiness refers to preparing systems, policies, and processes before incidents to support investigations.