RP L04: Sources of Evidence2 5Q

Which of the following is considered volatile evidence in digital forensics?

• Hard disk files

• RAM contents

• Printed documents

• Archived emails

Which category does log files from a web server fall under as a source of evidence?

• Volatile memory

• Network-based evidence

• Removable media

• Live acquisition

Why is volatile evidence prioritized in digital forensics?

• It is always encrypted

• It is easier to collect than non-volatile evidence

• It disappears when the system is powered off

• It requires no special tools to capture

Which of the following is NOT an example of primary digital evidence?

• System logs

• Database records

• Investigator’s notes

• Network traffic captures

Chain of custody in handling sources of evidence ensures:

• Faster evidence collection

• More storage space for data

• Integrity and authenticity of evidence

• Automated evidence analysis

Making 5 more slightly harder scenario-based questions can help in achieving deeper understanding.

• Yes, it can help in achieving deeper understanding.

• No, it does not help in understanding.

• It makes the questions easier to answer.

• It reduces the quality of learning.

Formatting these into a printable quiz sheet (PDF) is suitable for classroom use.

• Yes, it is suitable for classroom use.

• No, it is not suitable for classroom use.

• Only for online use, not classroom use.

• Only for personal study, not classroom use.