Cyber Forensics: Volatility Order, Hashing and Write Blockers Basics
Published:
Questions
30
Duration
30 min
Faculty-reviewed
0
Updated
25 May 2026
Practice with national-level exam (FACT, FACT Plus, NET, CUET, etc.) mocks, learn from structured notes, and get your doubts solved in one place.
Published:
Questions
30
Duration
30 min
Faculty-reviewed
0
Updated
25 May 2026
Score, per-question explanations and topic breakdown shown right after you submit.
Free ForensicSpot account required to save your progress — you’ll sign in when you start.
UGC-NET Forensic Science Unit VII drill on the foundational concepts of cyber forensics. Covers the order of volatility as defined in RFC 3227, from CPU registers and cache at the most volatile end through RAM, network state, running processes, and disk storage to archival media at the least volatile end. Write-blockers are examined as the first defensive tool an examiner deploys, with hardware devices such as Tableau and WiebeTech contrasted against software-based solutions. Hash functions tested include MD5 (128-bit digest), SHA-1 (160-bit), and SHA-256 (256-bit), with emphasis on their role in verifying digital evidence integrity before and after bit-stream imaging using FTK Imager, dd, and EnCase. Chain of custody requirements for digital evidence, the distinction between live and dead acquisition, and the basics of BSA 2023 Section 63 (formerly IEA Section 65B) electronic evidence certificates are all assessed.
The Indian statutory and judicial dimension covers IT Act 2000 Sections 65 (tampering with source code) and 66 (computer-related offences), cyber-crime taxonomy including hacking, phishing, and identity theft, and the landmark Supreme Court rulings Anvar P.V. v P.K. Basheer (2014) 10 SCC 473 and Arjun Panditrao Khotkar v Kailash Kushanrao Gorantyal (2020) 7 SCC 1 on admissibility of electronic records. The CFSL Hyderabad Cyber Crime Digital Repository (CCDR) and CERT-In are referenced as the primary Indian institutional pillars. Standards consulted include NIST SP 800-86 and ISO/IEC 27037, alongside Casey (Digital Evidence and Computer Crime, 3rd ed) and Nelson Phillips Steuart (Guide to Computer Forensics, 6th ed).
Topics covered:
Calibrated for first-pass UGC-NET Forensic Science Paper II Unit VII preparation and NFSU MSc Digital Forensics entrance revision. Allow 30 minutes.
Questions are written and edited by the ForensicSpot team and cited from peer-reviewed forensic textbooks, official syllabi and primary case law. Each one is verified before publishing. Detailed explanations show after you submit, so the test stays a real test. See a mistake? Tell us.