Digital › Module 2 › Lesson 5
Quiz — Types
10 APPLY items on volatile vs persistent, artifact quadrants, and metadata on $DFIR_LAB.
Opening
Evidence Types — Module Quiz
Ten APPLY items. Name evidence classes on YOUR $DFIR_LAB map — never stranger-device collection, metadata tampering, or unauthorized log exports. Original Cyberlium. Next: Acquisition Literacy.
Knowledge Check
APPLY: Volatile vs persistent literacy helps by:
Multiple choice
Knowledge Check
APPLY: True or False: RAM contents are generally volatile evidence.
True or False
Knowledge Check
APPLY: Disk artifacts primarily live on:
Multiple choice
Knowledge Check
APPLY: Tutorial exports employer logs without ticket — you:
Multiple choice
Knowledge Check
APPLY: Metadata includes:
Multiple choice
Knowledge Check
APPLY: Order-of-volatility often prioritizes:
Multiple choice
Knowledge Check
APPLY: Cyberlium NEVER allows:
Multiple choice
Knowledge Check
APPLY: True or False: SHA-256 supports integrity verification in CoC.
True or False
Knowledge Check
APPLY: chmod 600 on evidence notes means:
Multiple choice
Knowledge Check
APPLY: Next module after this quiz:
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)