Digital Forensics and Questioned Document
Analysis Overview Exam Questions and
Answers with Verified Solutions | Latest
Updated 2026
What is digital forensics? A branch of forensic science that focuses
on
identifying, acquiring, processing,
analyzing, and
reporting on data stored electronically.
What are the three steps in the 1. Acquiring the media, 2. Analyzing the
digital forensic evidence process? forensic
image, 3. Seizing the media.
What is the purpose of creating a To ensure that the original media are not
forensic image? modified
during analysis and to preserve the
probative value
of the evidence.
Name the major branches of Computer forensics, mobile device
digital forensics,
forensics. network forensics, forensic data analysis,
and
database forensics.
, What does computer forensics The recovery of digital evidence from
focus computers
on? and digital storage media.
What is mobile device forensics Evidence found in mobile devices.
concerned with?
What does network forensics Network traffic for legal evidence.
analyze?
What is the role of forensic data To monitor and analyze data with regard to
analysis? incidents of financial crime.
What does database forensics Databases and their related metadata,
relate especially in
to? large database breaches.
What is a questioned document? Any document about which some issue
has been
raised or that is the subject of an
investigation.
What are some examples of Checks, licenses, certificates, receipts,
questioned documents? lottery
tickets, passports, counterfeit money,
historical
documents, and ransom notes.
Analysis Overview Exam Questions and
Answers with Verified Solutions | Latest
Updated 2026
What is digital forensics? A branch of forensic science that focuses
on
identifying, acquiring, processing,
analyzing, and
reporting on data stored electronically.
What are the three steps in the 1. Acquiring the media, 2. Analyzing the
digital forensic evidence process? forensic
image, 3. Seizing the media.
What is the purpose of creating a To ensure that the original media are not
forensic image? modified
during analysis and to preserve the
probative value
of the evidence.
Name the major branches of Computer forensics, mobile device
digital forensics,
forensics. network forensics, forensic data analysis,
and
database forensics.
, What does computer forensics The recovery of digital evidence from
focus computers
on? and digital storage media.
What is mobile device forensics Evidence found in mobile devices.
concerned with?
What does network forensics Network traffic for legal evidence.
analyze?
What is the role of forensic data To monitor and analyze data with regard to
analysis? incidents of financial crime.
What does database forensics Databases and their related metadata,
relate especially in
to? large database breaches.
What is a questioned document? Any document about which some issue
has been
raised or that is the subject of an
investigation.
What are some examples of Checks, licenses, certificates, receipts,
questioned documents? lottery
tickets, passports, counterfeit money,
historical
documents, and ransom notes.
