Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling network forensics.
Choose an option to check your answer.
Correct Answer: A. To support traffic evidence analysis during an investigation.
Explanation:
The purpose of network forensics is connected with traffic evidence analysis, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Capturing and analyzing network traffic for evidence and intrusion investigation.
Explanation:
Network forensics refers to capturing and analyzing network traffic for evidence and intrusion investigation.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling log analysis.
Choose an option to check your answer.
Correct Answer: A. To support event record examination during an investigation.
Explanation:
The purpose of log analysis is connected with event record examination, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Reviewing system or application records to identify events and actions.
Explanation:
Log analysis refers to reviewing system or application records to identify events and actions.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling registry analysis.
Choose an option to check your answer.
Correct Answer: A. To support system artifact analysis during an investigation.
Explanation:
The purpose of registry analysis is connected with system artifact analysis, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Examining windows registry artifacts to identify user and system activity.
Explanation:
Registry analysis refers to examining Windows registry artifacts to identify user and system activity.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling file system analysis.
Choose an option to check your answer.
Correct Answer: A. To support storage structure examination during an investigation.
Explanation:
The purpose of file system analysis is connected with storage structure examination, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Examining structures such as directories, allocation tables, and timestamps.
Explanation:
File system analysis refers to examining structures such as directories, allocation tables, and timestamps.
