Computer Forensics Incident Response Quiz

What is the primary goal of computer forensics in incident response?

• To develop new software applications

• To identify, preserve, analyse, and present digital evidence

• To improve network speed

• To design user interfaces

Which of the following is a common tool used in computer forensics?

• Microsoft Word

• EnCase

• Adobe Photoshop

• Google Chrome

What is the first step in the computer forensic process?

• Analysis

• Preservation

• Identification

• Presentation

Which file system is commonly used in Windows operating systems?

• NTFS

• ext4

• HFS+

• FAT32

In the context of computer forensics, what does the term "chain of custody" refer to?

• The process of encrypting data

• The documentation of evidence handling

• The method of data recovery

• The technique of data compression

Which of the following is a volatile type of data that should be collected first during an incident response?

• Hard drive data

• RAM contents

• Archived emails

• Backup tapes

What is the purpose of hashing in computer forensics?

• To compress files

• To encrypt data

• To verify data integrity

• To increase processing speed

Which of the following is an example of a logical acquisition in computer forensics?

• Copying the entire hard drive

• Capturing network traffic

• Extracting specific files and folders

• Imaging the RAM

What is the role of a write blocker in computer forensics?

• To prevent data from being read

• To allow data to be modified

• To prevent data from being altered

• To increase data transfer speed

Which of the following is a key consideration when presenting digital evidence in court?

• The evidence must be colourful

• The evidence must be easy to understand

• The evidence must be tampered with

• The evidence must be encrypted