DIGITAL FORENSICS EXAMINATION QUESTIONS AND
CORRECT ANSWER WITH EXPLANATION GRADED A+
STUDY GUIDE SOUTHERN NEW HAMPSHIRE UNIVERSITY
1. Digital forensics is the process of:
A. Arresting cybercriminals only
B. Collecting and analyzing digital evidence
C. Conducting court trials
D. Writing laws
Answer: B
Rationale: It involves identifying and analyzing digital evidence for investigations.
2. The main goal of digital forensics is to:
A. Delete data
B. Preserve and analyze electronic evidence
C. Hack systems
D. Ignore cybercrime
Answer: B
Rationale: Ensures proper handling of digital evidence.
3. Digital evidence includes:
A. Paper documents only
B. Data from electronic devices
C. Court rulings
D. Witness statements only
Answer: B
Rationale: Includes data from computers, phones, and networks.
4. Chain of custody in digital forensics refers to:
A. Arrest process
B. Documentation of evidence handling
C. Court judgment
D. Bail process
Answer: B
Rationale: Tracks digital evidence integrity.
5. Volatile data is:
A. Permanent records
, B. Temporary data lost when device is off
C. Court evidence
D. Printed documents
Answer: B
Rationale: RAM data disappears when power is off.
6. Non-volatile data is:
A. Temporary memory
B. Stored permanently
C. Lost immediately
D. Random data
Answer: B
Rationale: Stored on hard drives or disks.
7. Forensic imaging is:
A. Editing files
B. Creating an exact copy of storage media
C. Deleting data
D. Encrypting files
Answer: B
Rationale: Preserves original evidence.
8. Write blocker is used to:
A. Delete files
B. Prevent modification of evidence
C. Hack systems
D. Encrypt data
Answer: B
Rationale: Ensures data integrity.
9. Hash value is used to:
A. Arrest suspects
B. Verify data integrity
C. Encrypt files only
D. Delete logs
Answer: B
Rationale: Confirms data has not changed.
10. Common hash algorithms include:
A. HTML, CSS
, B. MD5, SHA
C. SQL, PHP
D. JPEG, PNG
Answer: B
Rationale: Used for integrity verification.
11. Metadata is:
A. Court judgment
B. Data about data
C. Arrest record
D. Bail form
Answer: B
Rationale: Describes file information.
12. Cybercrime includes:
A. Physical theft only
B. Crimes using computers or networks
C. Court cases
D. Prison management
Answer: B
Rationale: Technology-based crimes.
13. Malware is:
A. Legal software
B. Malicious software
C. Court tool
D. Security system
Answer: B
Rationale: Harmful programs.
14. Virus is:
A. Hardware
B. Self-replicating malware
C. Legal code
D. Court document
Answer: B
Rationale: Spreads between systems.
15. Trojan horse is:
A. Firewall
CORRECT ANSWER WITH EXPLANATION GRADED A+
STUDY GUIDE SOUTHERN NEW HAMPSHIRE UNIVERSITY
1. Digital forensics is the process of:
A. Arresting cybercriminals only
B. Collecting and analyzing digital evidence
C. Conducting court trials
D. Writing laws
Answer: B
Rationale: It involves identifying and analyzing digital evidence for investigations.
2. The main goal of digital forensics is to:
A. Delete data
B. Preserve and analyze electronic evidence
C. Hack systems
D. Ignore cybercrime
Answer: B
Rationale: Ensures proper handling of digital evidence.
3. Digital evidence includes:
A. Paper documents only
B. Data from electronic devices
C. Court rulings
D. Witness statements only
Answer: B
Rationale: Includes data from computers, phones, and networks.
4. Chain of custody in digital forensics refers to:
A. Arrest process
B. Documentation of evidence handling
C. Court judgment
D. Bail process
Answer: B
Rationale: Tracks digital evidence integrity.
5. Volatile data is:
A. Permanent records
, B. Temporary data lost when device is off
C. Court evidence
D. Printed documents
Answer: B
Rationale: RAM data disappears when power is off.
6. Non-volatile data is:
A. Temporary memory
B. Stored permanently
C. Lost immediately
D. Random data
Answer: B
Rationale: Stored on hard drives or disks.
7. Forensic imaging is:
A. Editing files
B. Creating an exact copy of storage media
C. Deleting data
D. Encrypting files
Answer: B
Rationale: Preserves original evidence.
8. Write blocker is used to:
A. Delete files
B. Prevent modification of evidence
C. Hack systems
D. Encrypt data
Answer: B
Rationale: Ensures data integrity.
9. Hash value is used to:
A. Arrest suspects
B. Verify data integrity
C. Encrypt files only
D. Delete logs
Answer: B
Rationale: Confirms data has not changed.
10. Common hash algorithms include:
A. HTML, CSS
, B. MD5, SHA
C. SQL, PHP
D. JPEG, PNG
Answer: B
Rationale: Used for integrity verification.
11. Metadata is:
A. Court judgment
B. Data about data
C. Arrest record
D. Bail form
Answer: B
Rationale: Describes file information.
12. Cybercrime includes:
A. Physical theft only
B. Crimes using computers or networks
C. Court cases
D. Prison management
Answer: B
Rationale: Technology-based crimes.
13. Malware is:
A. Legal software
B. Malicious software
C. Court tool
D. Security system
Answer: B
Rationale: Harmful programs.
14. Virus is:
A. Hardware
B. Self-replicating malware
C. Legal code
D. Court document
Answer: B
Rationale: Spreads between systems.
15. Trojan horse is:
A. Firewall
