NEW
Font size
WorksheetsForensic Science Quiz
Total questions: 40
Worksheet time: 20mins
Which document ensures that evidence is formally issued and returned during an investigation?
Incident response plan
Evidence checkout log
Chain of custody
Case diary
What is the primary purpose of forensic duplication?
Speeding up analysis
Preserving original evidence
Reducing storage size
Encrypting data
Which duplication method captures all sectors including slack space?
Logical copy
Sparse acquisition
Bit-stream imaging
File backup
Why must evidence be authenticated after acquisition?
To encrypt evidence
To prove evidence integrity
To speed analysis
To compress data
Which activity is part of initial assessment?
Hash calculation
Determining incident scope
Disk imaging
Evidence archiving
An incident notification checklist is mainly used to:
Collect evidence
Decide whom to inform
Encrypt logs
Assign blame
Why is hexadecimal notation preferred in digital forensics?
It compresses data
It maps cleanly to binary
It encrypts information
It hides content
Which hexadecimal value represents one byte?
1 bit
2 hexadecimal characters
4 hexadecimal characters
8 hexadecimal characters
Which tool is most suitable for manual byte-level inspection of a file?
FTK Imager
Wireshark
Hex editor
Sysinternals
Which forensic concept ensures evidence remains unchanged from seizure to court?
Confidentiality
Hashing
Integrity
Availability
What is the main purpose of hashing digital evidence?
Encryption
Compression
Integrity verification
Authentication
Which hashing issue allows two different inputs to produce the same hash?
Bit rot
Hash collision
Hash chaining
Hash padding
Why is MD5 discouraged in modern forensics?
Too slow
Produces large hashes
Vulnerable to collisions
Requires secret key
What does bit rot indicate?
Malware infection
Gradual data corruption
Hash collision
Encryption failure
Which hashing algorithm is considered stronger than MD5?
CRC32
SHA-1
SHA-256
Base64
Why should forensic drives be wiped before use?
Improve speed
Reduce malware
Avoid cross-contamination
Enable encryption
Which SOP principle ensures investigations are repeatable?
Automation
Standardization
Encryption
Compression
Which OS artifact is commonly examined in Windows investigations?
/etc/passwd
Registry
Bash history
Kernel modules
Which error can invalidate forensic findings?
Using open-source tools
Poor documentation
Using SHA-256
Creating multiple images
Which type of evidence is non-volatile?
RAM
CPU cache
Hard disk data
Network connections
Which cipher type uses the same key for encryption and decryption?
Stream cipher
Block cipher
Symmetric cipher
Asymmetric cipher
Which cipher type encrypts data bit-by-bit or byte-by-byte?
Block cipher
Stream cipher
Hash cipher
Substitution cipher
AES is an example of:
Stream cipher
Block cipher
Hash algorithm
Asymmetric cipher
RSA is classified as:
Symmetric cipher
Block cipher
Stream cipher
Asymmetric cipher
Why is symmetric encryption preferred for bulk data encryption?
More secure
Faster performance
Uses public keys
Provides non-repudiation
Which algorithm is considered obsolete due to small key size?
AES
RSA
DES
ECC
Which technique allows two parties to agree on a shared secret over an insecure channel?
AES
RSA
Diffie–Hellman
HMAC
Which attack targets weak key generation or reuse?
Brute force
Key management attack
DoS
Replay attack
Which cryptographic issue occurs due to poor random number generation?
Collision
Predictable keys
Bit rot
Padding
Which lab tool is used to experiment with classical ciphers like Caesar and Vernam?
OpenSSL
CrypTool
FTK
Wireshark
Which cryptographic function ensures message integrity only?
Encryption
Hashing
Digital signature
Key exchange
HMAC provides:
Confidentiality
Integrity and authentication
Non-repudiation
Availability
Which algorithm combines hashing with a secret key?
SHA-256
MD5
HMAC
CRC
Which attack attempts every possible key?
Replay
MITM
Brute force
Side-channel
Which cryptographic problem makes MD5 unsafe?
Speed
Collision resistance failure
Key length
Padding
Which algorithm provides digital signatures?
AES
DES
RSA
RC4
Which cryptographic service ensures sender authentication?
Encryption
Hashing
Digital signature
Compression
Which cryptographic technique protects stored files on disk?
Hashing
File encryption
Key exchange
Encoding
Why are encryption attacks important to study?
To develop malware
To bypass firewalls
To understand weaknesses
To reduce encryption usage
Which cryptographic property prevents message alteration?
Confidentiality
Integrity
Availability
Non-repudiation
