Digital Forensics MCQs Worksheet

The first step in a digital forensic investigation is:

• Analysis

• Reporting

• Incident Verification

• Data Recovery

The process of creating an exact copy of a storage device is called:

• Cloning

• Disk Imaging

• Compression

• Encryption

Which principle determines the order of evidence collection?

• Chain of Custody

• Order of Volatility

• Data Integrity

• Encryption Rule

Which of the following is volatile data?

• Hard disk

• RAM

• USB drive

• CD-ROM

Which technique is used to recover deleted files?

• Data Mining

• Data Carving

• Encryption

• Hashing

Which is commonly used for secure data storage?

• Compression

• Encryption

• Imaging

• Hashing

Email spoofing refers to:

• Sending bulk emails

• Hiding sender identity

• Encrypting emails

• Blocking emails

Cookies are mainly used for:

• Encryption

• User tracking

• File recovery

• Disk imaging

Which tool is used to analyze network traffic?

• Wireshark

• Photoshop

• Notepad

• Excel

Which type of evidence is collected during live acquisition?

• Static data

• Archived data

• Volatile data

• Encrypted data