Digital Forensics Practice Quiz

DF6 W03: Q01. Which of the following is the acronym for the police guidelines with regards to Digital Forensics Investigations?

ROM SATA ACPO WLAN

DF6 W03: Q02. Which of the following is NOT considered a type of digital evidence?

Emails Hard drive images DNA samples Browser history

DF6 W03: Q03. Which of the following is used by a Digital Forensics Investigator to make a hard disk drive read-only?

Faraday Bag Write Blocker Windows Defrag Utility Hex Analyser

DF6 W03: Q04. In digital forensics, which of the following would be the best choice for imaging a hard drive to prevent data loss?

Disk cloning software Simple file copy commands A physical camera snapshot of the drive Manual recording of file names

DF6 W03: Q05. Which protocol is most commonly used to preserve chain of custody in digital evidence handling?

Chain Verification Protocol (CVP) Digital Evidence Handling Protocol (DEHP) Audit Trail Documentation Document and Report Log System (DRLS)

DF6 W03: Q06. During forensic analysis, what is the significance of volatile memory?

It permanently stores data even after the device is powered off It contains temporary data that may disappear when powered off It provides more storage space than hard drives It stores data faster than traditional hard drives

DF6 W03: Q07. Which technique is used to prevent digital devices from connecting to wireless networks during forensic examination?

Disabling the device’s Bluetooth Using a write blocker Storing the device in a Faraday bag Deleting all network configurations

DF6 W03: Q08. What is the main purpose of a forensic image of a hard drive?

To improve hard drive performance To provide a mirror copy of data without modifying the original To reduce the size of files for easier storage To permanently delete irrelevant data

DF6 W03: Q09. Which of the following is a Desktop operating system based upon UNIX?

Window NT IoS Linux MacOS

DF6 W03: Q10. Which of the following is HARDWARE that has the potential to store evidence in a Digital Forensics Investigation?

Excel USB Flash drive Photoshop Powerpoint

DF6 W03: Q11. In forensic analysis, what is 'steganography' commonly used for?

Storing data on cloud servers Encrypting digital files Hiding data within other files, such as images Creating a backup of critical information

DF6 W03: Q12. Which of the following laws applies to the crime of computer software piracy?

Computer Misuse Act Copyright, Designs and Patents Act Regulation of Investigatory Powers Act Data Protection Act

DF6 W03: Q13. Which number system is shown by the base 2 value "01101110"?

Hexadecimal Binary Octal Decimal

DF6 W03: Q14. The term "partitions" refers to which of the following?

CPU Hard Disk Drive System BIOS RAM

DF6 W03: Q15. In relation to Digital Forensics, what does the T of FTK stand for?

Task Time Tool Target

DF6 W03: Q16. What is a potential risk of using the ORIGINAL device for examination in a digital forensic case?

It speeds up the examination process It ensures the data remains secure It may modify or delete critical evidence It ensures better accuracy in analysis

DF6 W03: Q17. In digital forensics, what does the following system information "2.5 GHz" apply to?

Network Interface Card CPU ROM DVD Drive

DF6 W03: Q18. What does the G of GUI stand for

Group General Graphical Guided

Digital Forensics Week 03 Practice Quiz (18 Questions)

Score 11 or greater to pass.