Digital Forensics Report Writing Quiz

Why is it important to clearly and concisely present evidence in reports?

• To support further investigation or arrest

• To confuse the reader

• To make the report longer

• To avoid technological understanding

What is a key consideration when deciding what to include in a report?

• The length of the report

• The technological understanding of the audience

• The color of the report cover

• The font size used in the report

Which of the following is a recommended component of a report structure?

• Introduction

• Summary

• Abstract

• Preface

Which section of a report provides detailed information and analysis?

• Summary

• Body of the Report

• Glossary

• Appendixes

What is the role of forensic software in report generation?

• To explain the significance of evidence

• To define limitations of evidence

• To report what evidence was found and where

• To analyze the evidence

Which applications are associated with evidentiary data?

• Social media platforms

• Peer to peer, newsgroups, email, web browsers

• Video streaming services

• Online gaming platforms

What is the best way to establish knowledge on the part of the computer user?

• Examining the system registry files (NTUSER.DAT)

• Checking the recycle bin

• Looking at the desktop wallpaper

• Reviewing the task manager

What can the system registry files contain to help establish knowledge?

• Search terms for P2P applications

• Screensaver settings

• Installed printer drivers

• Background music files

Which file list is mentioned as a potential item of evidence?

• Most Recently Used (MRU) file lists

• Temporary internet files

• Download history

• System error logs

What can assist in establishing knowledge besides examining registry files?

• Looking at file date properties

• Checking the screen resolution

• Viewing the system clock

• Analyzing the color scheme