Digital Forensics

1. : What is the primary goal of digital forensics?
(A) To delete suspicious files
(B) To recover and investigate digital evidence
(C) To install antivirus software
(D) To increase computer speed

2. : Which of the following is the first step in the digital forensic process?
(A) Analysis
(B) Collection
(C) Preservation
(D) Identification

3. : What does a “hash value” ensure in digital forensics?
(A) File compression
(B) Data integrity
(C) System backup
(D) Password recovery

4. : Which tool is commonly used in digital forensics for disk imaging?
(A) Autopsy
(B) FTK Imager
(C) Wireshark
(D) Photoshop

5. : What does the term “chain of custody” refer to in digital forensics?
(A) The process of encrypting files
(B) The record of evidence handling from collection to court
(C) The backup of forensic data
(D) The network traffic monitoring log

6. : Which branch of digital forensics deals with mobile devices?
(A) Network forensics
(B) Mobile forensics
(C) Database forensics
(D) Malware forensics

7. : Which of the following is NOT a phase of digital forensics?
(A) Preservation
(B) Analysis
(C) Reconstruction
(D) Formatting