WorksheetsNIST 800-86
Total questions: 10
Worksheet time: 30mins
Name
Class
Date
1.
Which one of these is not a basic phases go Digital Forensics
a)
Collection
b)
Analysis
c)
Reporting
d)
Preservation
e)
Examination
2.
What is the primary goal of digital forensics?
a)
Collect evidence for criminal investigations
b)
Recover deleted data
c)
Restore damaged systems
d)
Enhance system performance
3.
Which one of the following is not part of Forensic staffing?
a)
Investigators
b)
IT professionals
c)
Incident Handlers
d)
HR Staff
e)
APT Actor
4.
Which of the following is an example of volatile data?
a)
A saved document on hard drive
b)
A web browser history
c)
A file that has been deleted
d)
A backup file on remote server
5.
Which file system is used in Mac?
a)
HFS
b)
FAT 16
c)
UFS
d)
NTFS
6.
Which of the following perform perform packet sniffing and analyze network traffic to identify suspicious activity and record relevant information
a)
Host IDS
b)
Network IDS
c)
Anti-virus
d)
EDR
7.
What is the purpose of hashing data during the forensic process?
a)
To recover deleted data
b)
To verify the integrity of the data
c)
To access encrypted files
d)
To analyze metadata
8.
Which of the following is not a common source of digital evidence?
a)
Social Media
b)
Email
c)
Network logs
d)
Physical evidence at a crime scene
9.
Which of the following is a common forensic tool used to create an exact image of a hard drive?
a)
Wireshark
b)
FTK Imager
c)
Nmap
d)
Nessus
10.
Which is not a type of interactive communication application?
a)
Group Chat
b)
Instant Messaging applications
c)
VoIP
d)
File Compression tool
100 %
