ICT3621 EXAM PACK 2025/2026 DETAILED
QUESTIONS AND ANSWERS Verified Solution Review
Guide with Correct Answers | Graded A+Latest Exam
Question:1
The possibility to collect ______ only presents itself during live
investigations, as it is volatile and the content is lost when the power is
turned off. - memory
Question:2
One of the processes to find any remote controlling software among
installed applications is to analyse ______ of the application to see
whether they have been used and how. - log files
Question:3
Evidence is _____ if it has any tendency to make a fact more or less
probable than it would be without the evidence. - relevant
1|Page
, Question:4
The credibility of __________ depends on the regular, prompt and
systematic nature of the entry and the fact that it is relied on the
operation. - business record
Question:5
In every legal case, _______ will want to pick apart every opinion and
conclusion you have for alternative interpretations of the data or flaws
in your method. - opposing attorney
Question:6
When the hard drive is encrypted, a ________ image will do you no
good because then the image will also be encrypted. - physical
Question:7
A forensic analyst also examines _____, which is data about
information. such as disk partition structures and file tables. - metadata
Question:8
_______ is the process to ensure that the actual data on the hard drive
that is to be examined is not compromised. - imaging
2|Page
QUESTIONS AND ANSWERS Verified Solution Review
Guide with Correct Answers | Graded A+Latest Exam
Question:1
The possibility to collect ______ only presents itself during live
investigations, as it is volatile and the content is lost when the power is
turned off. - memory
Question:2
One of the processes to find any remote controlling software among
installed applications is to analyse ______ of the application to see
whether they have been used and how. - log files
Question:3
Evidence is _____ if it has any tendency to make a fact more or less
probable than it would be without the evidence. - relevant
1|Page
, Question:4
The credibility of __________ depends on the regular, prompt and
systematic nature of the entry and the fact that it is relied on the
operation. - business record
Question:5
In every legal case, _______ will want to pick apart every opinion and
conclusion you have for alternative interpretations of the data or flaws
in your method. - opposing attorney
Question:6
When the hard drive is encrypted, a ________ image will do you no
good because then the image will also be encrypted. - physical
Question:7
A forensic analyst also examines _____, which is data about
information. such as disk partition structures and file tables. - metadata
Question:8
_______ is the process to ensure that the actual data on the hard drive
that is to be examined is not compromised. - imaging
2|Page
