RP L02 Security and Digital Forensics 5Q

How does digital forensics contribute to cybersecurity?

• By automatically removing malware from systems

• By providing evidence to understand and respond to security incidents

• By encrypting sensitive data before transmission

• By preventing cyber attacks in real time

Which of the following best describes the relationship between security and digital forensics?

• They are unrelated fields

• Security helps forensics recover deleted files

• Forensics supports security by investigating breaches and identifying weaknesses

• Forensics replaces traditional security controls

What type of attack would most likely trigger a digital forensic investigation?

• Regular software updates

• System maintenance

• Unauthorized access or data breach

• Installation of antivirus software

What is the purpose of incident response in the context of digital forensics?

• To disconnect the internet during an attack

• To arrest the cybercriminals immediately

• To detect, respond to, and recover from security breaches using forensic methods

• To update firewall rules

Which of the following tools is commonly used in both cybersecurity and digital forensics?

• Microsoft Excel

• Wireshark