Q1medium
An investigator arrives at a crime scene where a laptop is powered on and logged in. According to the Order of Volatility, which data should be captured first?
Back to Cyber Security
7 Questions TotalUnder 10 MCQs (Noindex)
Digital Forensics MCQs
Topic-wise practice questions for Cyber Security. Test your knowledge, check solutions on demand, and pace your preparation.
Zero-leak answer engine • Rate-limited explanations
Practice in Timed ModeQ2medium
An investigator finds a suspect's computer is running a TrueCrypt container (encrypted volume). Why should they perform a "Live Acquisition" while the computer is still on?
Q3easy
What is Steganography?
Q4medium
In digital forensics, where are deleted files typically found before they are overwritten by new data?
Q5easy
How does a Bit-stream Image differ from a standard Back-up of a folder?
Q6medium
A forensic tool generates the following output after imaging a drive. What is the investigator checking here?
Q7medium
A digital investigator completes an analysis but forgets to document who had access to the evidence locker for a 24-hour period. Which legal requirement has been compromised?