Digital Forensics: Principles, Evidence Types, and
Challenges Exam | Questions with 100% Correct
Answers | Verified | Latest Update 2026
Save
Terms in this set (48)
What is digital forensics? The field that involves the collection, preservation,
analysis, and presentation of digital evidence in
legal contexts.
Why is digital forensics increasingly Because nearly every crime has a digital dimension,
important? leading to an abundance of digital evidence.
What are some sources of digital Internet searches, map searches, street views, and
footprints? email communications.
What types of investigations utilize Administrative investigations, criminal
digital forensics? investigations, civil investigations, and intellectual
property investigations.
What role does digital forensics play It helps identify breach origins, compromised
in incident response? systems, and attack vectors, supporting
containment and prevention of future attacks.
What is the significance of regulatory It ensures that digital records are maintained,
compliance in digital forensics? auditable, and defensible in compliance with laws
like GDPR and HIPAA.
, Define digital evidence. Any object or piece of information relevant to a
crime that was collected lawfully.
What does 'corpus delicti' refer to? The facts and circumstances constituting a breach
of law, concrete evidence of a crime.
What is 'modus operandi'? The way in which something operates or works,
often used to describe a criminal's pattern of
behavior.
What is electronic evidence? Information extracted from computer systems or
digital devices that can prove or disprove an
offense.
List the reasons for seeking digital To prove a crime occurred, link a person to a crime,
evidence. support or disprove testimonies, identify suspects,
provide leads, or eliminate suspects.
What is documentary evidence? Any writing, video, or sound recording material
whose authenticity needs to be established in
court.
Define physical evidence in digital Tangible evidence, such as computers and mobile
forensics. phones, that corroborates statements from
suspects, witnesses, or victims.
What is direct evidence? Evidence that establishes a fact, including
eyewitness testimony and confessions.
What is circumstantial evidence? Evidence that allows inference of a fact, such as IP
address logs and browsing history.
Challenges Exam | Questions with 100% Correct
Answers | Verified | Latest Update 2026
Save
Terms in this set (48)
What is digital forensics? The field that involves the collection, preservation,
analysis, and presentation of digital evidence in
legal contexts.
Why is digital forensics increasingly Because nearly every crime has a digital dimension,
important? leading to an abundance of digital evidence.
What are some sources of digital Internet searches, map searches, street views, and
footprints? email communications.
What types of investigations utilize Administrative investigations, criminal
digital forensics? investigations, civil investigations, and intellectual
property investigations.
What role does digital forensics play It helps identify breach origins, compromised
in incident response? systems, and attack vectors, supporting
containment and prevention of future attacks.
What is the significance of regulatory It ensures that digital records are maintained,
compliance in digital forensics? auditable, and defensible in compliance with laws
like GDPR and HIPAA.
, Define digital evidence. Any object or piece of information relevant to a
crime that was collected lawfully.
What does 'corpus delicti' refer to? The facts and circumstances constituting a breach
of law, concrete evidence of a crime.
What is 'modus operandi'? The way in which something operates or works,
often used to describe a criminal's pattern of
behavior.
What is electronic evidence? Information extracted from computer systems or
digital devices that can prove or disprove an
offense.
List the reasons for seeking digital To prove a crime occurred, link a person to a crime,
evidence. support or disprove testimonies, identify suspects,
provide leads, or eliminate suspects.
What is documentary evidence? Any writing, video, or sound recording material
whose authenticity needs to be established in
court.
Define physical evidence in digital Tangible evidence, such as computers and mobile
forensics. phones, that corroborates statements from
suspects, witnesses, or victims.
What is direct evidence? Evidence that establishes a fact, including
eyewitness testimony and confessions.
What is circumstantial evidence? Evidence that allows inference of a fact, such as IP
address logs and browsing history.
