JNTU
JNTU B.Tech IV COMPUTER FORENSICS Previous Question Paper (July - 2023 - R16)
Note: i) Question paper consists of Part A, Part B. ii) Part A is compulsory, which carries 25 marks. In Part A, Answer all questions. iii) In Part B, Answer any one question from each unit. Each question carries 10 marks and may have a, b as sub questions.
Part A
What is Virus? List its types.
Answer
A virus is a malicious software program that replicates itself by modifying other computer programs and inserting its own code. Types include: file infectors, boot sector viruses, macro viruses, multipartite viruses, and polymorphic viruses.
Write the services of computer forensics.
Answer
Computer forensics services include: identification and preservation of digital evidence, forensic data recovery, analysis of system logs and network traffic, expert witness testimony, and incident response support to reconstruct cyber-attacks.
What is qualified forensics?
Answer
Sign in to view the complete answer paper.
Write the feature of forensic duplication.
Answer
Sign in to view the complete answer paper.
What is packet sniffer?
Answer
Sign in to view the complete answer paper.
Give a note on live acquisition.
Answer
Sign in to view the complete answer paper.
What is MIME?
Answer
Sign in to view the complete answer paper.
Write SIMCon’s features.
Answer
Sign in to view the complete answer paper.
What is MBR and MFT?
Answer
Sign in to view the complete answer paper.
List NTFS compressed files.
Answer
Sign in to view the complete answer paper.
Part B
What is digital forensics? Explain its applications.
Answer
Sign in to view the complete answer paper.
Write the role of computers in cybercrime.
Answer
Sign in to view the complete answer paper.
Explain the activities of initial response.
Answer
Sign in to view the complete answer paper.
Explain how can use computer forensic evidence?
Answer
Sign in to view the complete answer paper.
Elaborate steps for remote data acquisition for digital forensics.
Answer
Sign in to view the complete answer paper.
Explain forensics data duplication tools.
Answer
Sign in to view the complete answer paper.
Write the steps to get volatile data from Windows.
Answer
Sign in to view the complete answer paper.
Describe the persevering techniques of evidence.
Answer
Sign in to view the complete answer paper.
Explain what data to be collected for forensics analysis.
Answer
Sign in to view the complete answer paper.
Discuss different methods to validate forensic data.
Answer
Sign in to view the complete answer paper.
List and explain network forensics tools.
Answer
Sign in to view the complete answer paper.
Explain different data collection method in remote.
Answer
Sign in to view the complete answer paper.
List and explain computer forensics software tools.
Answer
Sign in to view the complete answer paper.
Write the role email servers in email investigations.
Answer
Sign in to view the complete answer paper.
Write about Microsoft e-mail server logs.
Answer
Sign in to view the complete answer paper.
Explain email forensics tools.
Answer
Sign in to view the complete answer paper.
Describe Microsoft file structure in detail.
Answer
Sign in to view the complete answer paper.
Explain the steps for whole disk encryption for forensics.
Answer
Sign in to view the complete answer paper.
Explain MS DOS startup tasks.
Answer
Sign in to view the complete answer paper.
Explain steps for examining windows registry.
Answer
Sign in to view the complete answer paper.