Digital Forensics MCQs

Email header refers to technical routing information that helps trace an email path.

The purpose of cloud log is connected with cloud activity record, not with altering or avoiding evidence procedures.

Forensic work requires documentation and preservation of evidence integrity, especially when handling social media forensics.

Forensic readiness refers to preparing systems, policies, and processes before incidents to support investigations.

The purpose of email header is connected with message path evidence, not with altering or avoiding evidence procedures.

Forensic work requires documentation and preservation of evidence integrity, especially when handling cloud log.

Screenshot evidence refers to a visual record that must be authenticated and supported by metadata when possible.

The purpose of forensic readiness is connected with investigation preparedness, not with altering or avoiding evidence procedures.

Forensic work requires documentation and preservation of evidence integrity, especially when handling email header.

Internet forensics refers to investigating browser, web, email, and online activity artifacts.

The purpose of screenshot evidence is connected with visual evidence capture, not with altering or avoiding evidence procedures.

Forensic work requires documentation and preservation of evidence integrity, especially when handling forensic readiness.