Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling screenshot evidence.
Choose an option to check your answer.
Correct Answer: A. To support visual evidence capture during an investigation.
Explanation:
The purpose of screenshot evidence is connected with visual evidence capture, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. A visual record that must be authenticated and supported by metadata when possible.
Explanation:
Screenshot evidence refers to a visual record that must be authenticated and supported by metadata when possible.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling social media forensics.
Choose an option to check your answer.
Correct Answer: A. To support social platform evidence analysis during an investigation.
Explanation:
The purpose of social media forensics is connected with social platform evidence analysis, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Collecting and analyzing evidence from social platforms and communications.
Explanation:
Social media forensics refers to collecting and analyzing evidence from social platforms and communications.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling cache artifact.
Choose an option to check your answer.
Correct Answer: A. To support stored activity evidence during an investigation.
Explanation:
The purpose of cache artifact is connected with stored activity evidence, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Locally stored web or app data that may reveal previously accessed content.
Explanation:
Cache artifact refers to locally stored web or app data that may reveal previously accessed content.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling cookie artifact.
Choose an option to check your answer.
Correct Answer: A. To support browser evidence trace during an investigation.
Explanation:
The purpose of cookie artifact is connected with browser evidence trace, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Small browser-stored data that may show sessions or user activity.
Explanation:
Cookie artifact refers to small browser-stored data that may show sessions or user activity.
