Digital Forensics: Evidence Collection, Analysis,
and Legal Principles Exam | Questions with 100%
Correct Answers | Verified | Latest Update 2026
Save
Terms in this set (39)
What is digital forensics? The process of preserving, identifying, extracting,
and documenting digital evidence stored on
electronic devices.
When did digital forensics begin? In the 1980s in the United States due to the
increase in computer-related crimes.
What are some examples of crimes Fraud, murder, robbery, and harassment.
that digital forensics can help
investigate?
What does repeatability mean in Different investigators should be able to perform
forensic science? the same test and get the same results.
What is validation in the context of Proving that a forensic tool, technique, or
digital forensics? procedure works properly and produces accurate
results.
What does verification entail in Checking and confirming that validated tools,
digital forensics? techniques, or procedures are working correctly.
, What is digital evidence? Information with legal value that is stored or shared
in digital form.
How do investigators typically They secure and seize the device, and a digital
handle digital evidence? forensic examiner later extracts and analyzes the
data.
What features help protect and Investigators can examine a copy instead of the
preserve digital evidence? original, and deleted files can often be recovered.
What is the Electronic A South African law enacted in 2002 that officially
Communications and Transactions allows digital evidence to be used in court
Act? proceedings.
What does Section 15(2) of the It explains how courts should evaluate digital
Electronic Communications and evidence, focusing on reliability and proper
Transactions Act address? handling.
What factors do courts consider Whether the evidence is authentic, whether the
regarding the authenticity of digital device was properly secured, and whether the
evidence? evidence was collected correctly.
What does Section 15(3) of the Guidelines for South African courts on how much
Electronic Communications and weight to give to digital evidence.
Transactions Act provide?
How can deleted digital evidence Even when deleted, traces may remain on devices,
still be recovered? servers, or cloud backups.
What is an example of digital WhatsApp messages, GPS location history, photos,
evidence in a murder investigation? videos, and call records from a suspect's
cellphone.
and Legal Principles Exam | Questions with 100%
Correct Answers | Verified | Latest Update 2026
Save
Terms in this set (39)
What is digital forensics? The process of preserving, identifying, extracting,
and documenting digital evidence stored on
electronic devices.
When did digital forensics begin? In the 1980s in the United States due to the
increase in computer-related crimes.
What are some examples of crimes Fraud, murder, robbery, and harassment.
that digital forensics can help
investigate?
What does repeatability mean in Different investigators should be able to perform
forensic science? the same test and get the same results.
What is validation in the context of Proving that a forensic tool, technique, or
digital forensics? procedure works properly and produces accurate
results.
What does verification entail in Checking and confirming that validated tools,
digital forensics? techniques, or procedures are working correctly.
, What is digital evidence? Information with legal value that is stored or shared
in digital form.
How do investigators typically They secure and seize the device, and a digital
handle digital evidence? forensic examiner later extracts and analyzes the
data.
What features help protect and Investigators can examine a copy instead of the
preserve digital evidence? original, and deleted files can often be recovered.
What is the Electronic A South African law enacted in 2002 that officially
Communications and Transactions allows digital evidence to be used in court
Act? proceedings.
What does Section 15(2) of the It explains how courts should evaluate digital
Electronic Communications and evidence, focusing on reliability and proper
Transactions Act address? handling.
What factors do courts consider Whether the evidence is authentic, whether the
regarding the authenticity of digital device was properly secured, and whether the
evidence? evidence was collected correctly.
What does Section 15(3) of the Guidelines for South African courts on how much
Electronic Communications and weight to give to digital evidence.
Transactions Act provide?
How can deleted digital evidence Even when deleted, traces may remain on devices,
still be recovered? servers, or cloud backups.
What is an example of digital WhatsApp messages, GPS location history, photos,
evidence in a murder investigation? videos, and call records from a suspect's
cellphone.
