Digital Forensics: Evidence Collection,
Analysis, and Legal Principles Exam
Questions and Answers with Verified
Solutions | Latest Updated 2026
What is digital forensics? The process of preserving, identifying,
extracting,
and documenting digital evidence stored
on
electronic devices.
When did digital forensics begin? In the 1980s in the United States due to
the
increase in computer-related crimes.
What are some examples of Fraud, murder, robbery, and harassment.
crimes
that digital forensics can help
investigate?
What does repeatability mean in Different investigators should be able to
forensic science? perform
the same test and get the same results.
What is validation in the context of Proving that a forensic tool, technique, or
digital forensics? procedure works properly and produces
accurate
results.
, What does verification entail in Checking and confirming that validated
digital forensics? tools,
techniques, or procedures are working
correctly.
What is digital evidence? Information with legal value that is stored
or shared
in digital form.
How do investigators typically They secure and seize the device, and a
handle digital evidence? digital
forensic examiner later extracts and
analyzes the
data.
What features help protect and Investigators can examine a copy instead
preserve digital evidence? of the
original, and deleted files can often be
recovered.
What is the Electronic A South African law enacted in 2002 that
Communications and Transactions officially
Act? allows digital evidence to be used in court
proceedings.
What does Section 15(2) of the It explains how courts should evaluate
Electronic Communications and digital
Transactions Act address? evidence, focusing on reliability and proper
handling.
Analysis, and Legal Principles Exam
Questions and Answers with Verified
Solutions | Latest Updated 2026
What is digital forensics? The process of preserving, identifying,
extracting,
and documenting digital evidence stored
on
electronic devices.
When did digital forensics begin? In the 1980s in the United States due to
the
increase in computer-related crimes.
What are some examples of Fraud, murder, robbery, and harassment.
crimes
that digital forensics can help
investigate?
What does repeatability mean in Different investigators should be able to
forensic science? perform
the same test and get the same results.
What is validation in the context of Proving that a forensic tool, technique, or
digital forensics? procedure works properly and produces
accurate
results.
, What does verification entail in Checking and confirming that validated
digital forensics? tools,
techniques, or procedures are working
correctly.
What is digital evidence? Information with legal value that is stored
or shared
in digital form.
How do investigators typically They secure and seize the device, and a
handle digital evidence? digital
forensic examiner later extracts and
analyzes the
data.
What features help protect and Investigators can examine a copy instead
preserve digital evidence? of the
original, and deleted files can often be
recovered.
What is the Electronic A South African law enacted in 2002 that
Communications and Transactions officially
Act? allows digital evidence to be used in court
proceedings.
What does Section 15(2) of the It explains how courts should evaluate
Electronic Communications and digital
Transactions Act address? evidence, focusing on reliability and proper
handling.
