Digital Forensics Practice Quiz

DF6 W05: Q01. Which of the following relates to verifying the integrity of the data stored on a hard disk

Steganography Faraday bags Hashing Defragmentation

DF6 W05: Q02. Which of the following is NOT considered a type of digital evidence?

Emails Hard drive images Discarded paper Browser history

DF6 W05: Q03. Which of the following provides details about file creation, access, and modification in relation to files digital forensics?

Hex Metadata Virtual memory Write Blocker

DF6 W05: Q04. What is the primary goal of a digital forensics investigation?

To delete unnecessary files To recover and analyze data for legal proceedings To increase storage efficiency To optimize system performance

DF6 W05: Q05. Which protocol is most commonly used to preserve chain of custody in digital evidence handling?

Chain Verification Protocol (CVP) Digital Evidence Handling Protocol (DEHP) Audit Trail Documentation Document and Report Log System (DRLS)

DF6 W05: Q06. Which of the following best describes volatile memory?

It is non-erasable and stores permanent data It temporarily stores data and is cleared when power is off It encrypts data for secure storage It logs network traffic for future analysis

DF6 W05: Q07. Which technique is used to prevent digital devices from connecting to wireless networks during a forensic investigation?

Disabling the device’s Bluetooth Using a write blocker Enclosing the device in a Faraday bag Deleting all network configurations

DF6 W05: Q08. What is the main purpose of a forensic image of a hard drive?

To improve hard drive performance To provide a "exact copy" of data without modifying the original To reduce the size of files for easier storage To permanently delete irrelevant data

DF6 W05: Q09. Why is chain of custody important in digital forensics?

It ensures evidence is tamper-proof and legally admissible It improves the speed of data recovery It encrypts evidence for security It helps track network activity

DF6 W05: Q10. What does the term "data carving" refer to?

Recovering files without relying on file system metadata Encrypting data for storage Organizing files into categories Creating compressed backups

DF6 W05: Q11. In forensic analysis, what is 'steganography' commonly used for?

Storing data on cloud servers Encrypting digital files Hiding data within other files, such as images Creating a backup of critical information

DF6 W05: Q12. What kind of data is typically NOT recovered through file carving?

Deleted files Overwritten files Fragmented files Hidden files

DF6 W05: Q13. Which file attribute would indicate a file has been accessed but NOT modified?

Creation date Access date Modification date Signature

DF6 W05: Q14. Which of the following can be used to identify the geographic origin of an IP address?

HTTP headers IP geolocation databases System BIOS Domain name servers

DF6 W05: Q15. Which one of the following is considered a primary tool in digital forensics investigations?

Adobe Photoshop Microsoft Excel FTK (Forensic Toolkit) VLC Media Player

DF6 W05: Q16. What is a potential risk of using the original device for examination in a digital forensic case?

It speeds up the examination process It ensures the data remains secure It may modify or delete critical evidence It ensures better accuracy in analysis

DF6 W05: Q17. In digital forensics, what is the main function of 'data carving'?

Creating a backup of files for later use Recovering files without relying on the file system’s structure Compressing files for efficient storage Encrypting files to enhance security

DF6 W05: Q18. In mobile device forensics, what type of memory is commonly extracted to retrieve deleted data?

ROM RAM Flash memory BIOS

Digital Forensics Week 05 Practice Quiz (18 Questions)

Score 11 or greater to pass.