All MCQs

Packets may reveal authentication attempts and network activity.

Forensic work requires documentation and preservation of evidence integrity, especially when handling virtualization in forensics.

Data distribution analysis refers to studying patterns, outliers, and frequency in forensic datasets.

Clock differences must be accounted for during timeline reconstruction.

Forensic work requires documentation and preservation of evidence integrity, especially when handling audio/video evidence.

Forensic tool validation refers to checking that a tool produces reliable and repeatable results.

The purpose of data distribution analysis is connected with pattern interpretation, not with altering or avoiding evidence procedures.

Analysis should normally be done on forensic copies.

Image metadata refers to embedded information in images such as date, device model, and GPS when present.

The purpose of forensic tool validation is connected with tool reliability assurance, not with altering or avoiding evidence procedures.

Forensic work requires documentation and preservation of evidence integrity, especially when handling data distribution analysis.

Registry and event logs often contain user and system activity traces.