What is the focus of digital forensics?

• A. Creating software applications
• B. Recovering and analyzing electronic data
• C. Enhancing internet security
• D. Developing operating systems

Answer: (B)

Digital forensics focuses on recovering and analyzing electronic data to uncover evidence, reconstruct events, and support investigations. This work involves data from computers, mobile devices, storage systems, and networks, with an emphasis on preserving evidence integrity through proper handling, documentation, and chain of custody. Investigators look for things like deleted files, logs, metadata, and artifacts left by apps or network activity to understand what happened and when. This is distinct from creating software applications, which is about building programs; enhancing internet security, which aims to protect systems; and developing operating systems, which is about designing and maintaining the software that runs devices.