Digital Forensics Process.

• A. A method for network monitoring
• B. A systematic approach to collecting, preserving, and analyzing digital evidence during investigations
• C. An encryption standard
• D. A data backup procedure

Answer: (B)

Digital forensics is about handling digital evidence in a disciplined, reproducible way. The process is a systematic approach to collecting, preserving, and analyzing digital evidence during investigations, ensuring integrity and admissibility. It typically follows phases such as identifying relevant data, preserving it to prevent tampering, collecting it with proper tools and chain of custody, analyzing to extract meaningful information, and documenting and presenting findings. This structured workflow helps investigators demonstrate that evidence hasn’t been altered and that conclusions are trustworthy. In contrast, network monitoring concentrates on observing network traffic in real time for security events, an encryption standard focuses on how data is protected through cryptography, and a data backup procedure is about creating copies for recovery rather than investigating incidents.