ACE Evidence Acquisition & Preservation

Question 1

What is the primary objective of evidence acquisition in digital forensics?

Accepted Answer

Collect digital data without altering integrity

Answer

Modify evidence to make it admissible

Answer

Erase unnecessary files to save space

Answer

Convert evidence to a different format for convenience

Question 2

Which tool is commonly used for acquiring forensic images?

Accepted Answer

FTK Imager

Answer

Adobe Photoshop

Answer

Microsoft Word

Answer

Google Chrome

Question 3

What is the purpose of maintaining a chain of custody in evidence handling?

Accepted Answer

Prevent tampering and maintain documentation

Answer

Allow anyone to access the evidence freely

Answer

Speed up the forensic process by skipping documentation

Answer

Modify evidence to match investigation needs

Question 4

Which of the following is considered the safest method for preserving digital evidence?

Accepted Answer

Use write-blocking tools

Answer

Copy files directly onto a working system

Answer

Convert files to a different format for easy access

Answer

Save evidence on a network drive with multiple users

Question 5

What is a forensic image in digital evidence acquisition?

Accepted Answer

An exact copy of a digital device

Answer

A summary report of important files

Answer

A compressed version of select data

Answer

A manually edited set of files

Question 6

Why is hashing important in digital forensics?

Accepted Answer

Ensures data integrity with a unique identifier

Answer

Compresses files for easier storage

Answer

Encrypts evidence for extra security

Answer

Removes unnecessary data from the investigation