Practice Library
All MCQs
Browse exam-wise, subject-wise, and country-wise MCQs with explanations.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling md5/sha hashing.
Choose an option to check your answer.
Correct Answer: A. To support integrity checking during an investigation.
Explanation:
The purpose of md5/sha hashing is connected with integrity checking, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. A hashing technique used to detect whether evidence has changed.
Explanation:
MD5/SHA hashing refers to a hashing technique used to detect whether evidence has changed.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling hash value.
Choose an option to check your answer.
Correct Answer: A. To support integrity verification during an investigation.
Explanation:
The purpose of hash value is connected with integrity verification, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. A fixed-length digital fingerprint used to verify data integrity.
Explanation:
Hash value refers to a fixed-length digital fingerprint used to verify data integrity.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling forensic image.
Choose an option to check your answer.
Correct Answer: A. To support exact evidence copy during an investigation.
Explanation:
The purpose of forensic image is connected with exact evidence copy, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. A bit-by-bit copy of storage media used for analysis instead of the original.
Explanation:
Forensic image refers to a bit-by-bit copy of storage media used for analysis instead of the original.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling write blocker.
Choose an option to check your answer.
Correct Answer: A. To support evidence protection during an investigation.
Explanation:
The purpose of write blocker is connected with evidence protection, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. A device or method used to prevent changes to original storage media.
Explanation:
Write blocker refers to a device or method used to prevent changes to original storage media.
