A cloud provider stores logs in another jurisdiction. What issue becomes especially important?
Correct Answer: A. Legal authority and cross-border compliance
MCQ Collection
Digital Forensics MCQs
Digital Forensics MCQs for practice, quizzes, and exam preparation.
In digital forensics, what does ‘Sandbox use’ mainly refer to?
Correct Answer: A. Isolated environment used to safely observe suspicious files or activity.
Which option best describes the purpose of education and awareness in a forensic investigation?
Correct Answer: A. To support preparedness building during an investigation.
A browser cache contains images from a visited website. What can this help establish?
Correct Answer: A. That content may have been accessed or loaded
Which option best describes the purpose of sandbox use in a forensic investigation?
Correct Answer: A. To support controlled analysis environment during an investigation.
A forensic examiner is dealing with education and awareness. Which action is most appropriate?
Correct Answer: A. Document the process and preserve evidence integrity.
A mobile app stores messages in a local SQLite database. What type of evidence is this?
Correct Answer: A. Application artifact
A forensic examiner is dealing with sandbox use. Which action is most appropriate?
Correct Answer: A. Document the process and preserve evidence integrity.
In digital forensics, what does ‘Digital forensic readiness plan’ mainly refer to?
Correct Answer: A. A plan defining logging, roles, evidence handling, and response preparation.
A suspect uses wiping software before seizure. What is this an example of?
Correct Answer: A. Anti-forensics
A forensic examiner is dealing with collection phase. Which action is most appropriate?
Correct Answer: A. Document the process and preserve evidence integrity.
In digital forensics, what does ‘Ethics in forensics’ mainly refer to?
Correct Answer: A. Professional behavior involving honesty, legality, confidentiality, and objectivity.