FIA Past Paper 09By haseeb lali / July 5, 2026 FIA Past Paper 09 1 / 100 The closest meaning of “exculpate” is: To accuse To clear from blame To punish To delay 2 / 100 Choose the antonym of “impartial”: Neutral Objective Biased Fair 3 / 100 Choose the correct sentence: Neither the complainant nor the witnesses was present. Neither the complainant nor the witnesses were present. Neither the complainant nor witnesses was present. Neither complainant nor witnesses is present. 4 / 100 The phrase “beyond jurisdiction” means: Within legal power Outside legal authority Under police duty Inside court premises 5 / 100 Choose the correct conditional sentence: If the officer had verified the source, the report would be reliable. If the officer had verified the source, the report would have been reliable. If the officer verified source, report would have reliable. If officer would verify source, report was reliable. 6 / 100 The legal term “in camera proceedings” means: Proceedings recorded by camera only Proceedings held privately or not open to public Proceedings without judge Proceedings without documents 7 / 100 Choose the correct passive voice: “The analyst has extracted the deleted files.” The deleted files extracted by analyst. The deleted files have been extracted by the analyst The analyst has been extracted deleted files. The deleted files has extracted. 8 / 100 “Material evidence” means evidence that is: Made of physical material only Relevant and important to the case Always oral Always weak 9 / 100 Choose the correct preposition: The accused was convicted ___ cyber fraud. at of with by 10 / 100 Choose the correct word: The officer’s explanation was difficult to ___. elicit illicit accept except 11 / 100 “Ab initio” means: From the beginning At the end After appeal During remand 12 / 100 Choose the correct sentence: The number of complaints are increasing The number of complaints is increasing The number complaints are increasing. The number of complaint have increased. 13 / 100 “Contempt of court” means: Respect for court Disobedience or disrespect toward court authority Filing an appeal Recording evidence 14 / 100 Choose the correct indirect speech: The analyst said, “The hash values match.” The analyst said that the hash values matched. The analyst said that hash values matches. The analyst says the hash values matched. The analyst said that hash values had match. 15 / 100 “Fugitive” means: A person avoiding arrest or legal process A court clerk A witness under oath A public servant 16 / 100 A suspect’s phone is unlocked when recovered, but messages may disappear remotely. Best first concern is: Take selfies from phone Network isolation and preservation Update all apps Delete suspicious chats 17 / 100 A forensic examiner uses a Faraday bag mainly to: Block network signals Increase battery life Repair storage Encrypt files 18 / 100 A physical forensic image is preferred over a logical copy when investigators need: Only visible contacts Deleted data, unallocated space, and full storage structure Only screenshots Only current wallpapers 19 / 100 Hash values are calculated before and after imaging to show: Evidence integrity Internet speed Password strength Screen resolution 20 / 100 If an image hash does not match the original source hash, the examiner should: Ignore the mismatch Treat it as possible acquisition/integrity issue Delete the source Immediately convict accused 21 / 100 A write blocker is mainly used when acquiring evidence from: Original storage media A printed photo only A keyboard cover A monitor stand 22 / 100 Which artifact can prove that a USB was connected to a Windows system? Registry and event log artifacts Wallpaper file only Screen brightness setting Speaker volume 23 / 100 In mobile forensics, app databases may contain: Chats, timestamps, attachments, and user identifiers Only phone color Only charger speed Only SIM price 24 / 100 A deleted file recovered based on its header/footer signature is recovered through: Data carving Data painting File printing Screen reading 25 / 100 Timeline analysis helps investigators: Reconstruct sequence of digital activities Increase RAM Improve font style Change file icons 26 / 100 A suspicious executable is run in an isolated VM to observe behavior. This is: Dynamic malware analysis Legal drafting File compression DNS lookup only 27 / 100 Static malware analysis means: Examining code/file without executing it Running it on victim system Deleting it immediately Sharing it publicly 28 / 100 A fake invoice attachment installs malware when opened. This is likely: Trojan/social engineering attack Safe backup Legal update Normal spreadsheet formatting 29 / 100 A compromised account sends emails appearing from a trusted officer. This may involve: Account takeover or email spoofing Disk defragmentation File compression Printer queue 30 / 100 Which is a sign of credential stuffing? Many login attempts using leaked username/password pairs One normal login from usual device File renaming Offline printing 31 / 100 Which cybersecurity control reduces credential-stuffing risk most effectively? Multi-factor authentication Shared passwords Same password everywhere Disabling logs 32 / 100 A fake website uses a valid-looking SSL certificate. This proves: The website is always genuine The connection may be encrypted, but site may still be fraudulent The site is government-approved No phishing can occur 33 / 100 SQL injection is best prevented by: Parameterized queries/input validation Increasing monitor brightness Using short passwords Disabling backups 34 / 100 Cross-site scripting mainly involves injecting: Malicious scripts into web pages Malware into RAM only Viruses into printer cartridge Watermark into PDF 35 / 100 A DDoS attack mainly harms: Availability File ownership only Authentication only Physical integrity only 36 / 100 A rootkit is dangerous because it can: Hide malicious activity deeply in system Improve system transparency Print reports faster Create legal backups 37 / 100 A digital certificate helps verify: Identity of entity/public key relationship Laptop weight Screen size Mouse sensitivity 38 / 100 Non-repudiation is best supported by: Digital signatures Shared passwords Deleted logs Anonymous access 39 / 100 A hash collision means: Different inputs produce same hash output Same file has two fonts Two monitors show same image Internet connection failed 40 / 100 Encryption at rest protects: Stored data Court seating plan Keyboard layout Printer ink 41 / 100 FIA stands for: Federal Investigation Agency Federal Intelligence Authority Foreign Investigation Agency Federal Integrity Agency 42 / 100 The Federal Investigation Agency Act is commonly referred to as: FIA Act, 1974 FIA Act, 2016 Cyber Police Act, 1973 Immigration Act only 43 / 100 PECA stands for: Prevention of Electronic Crimes Act Pakistan Evidence Cyber Authority Public Electronic Control Act Prevention of Economic Courts Act 44 / 100 The core purpose of PECA-style cybercrime law is to address: Electronic/cyber offences and related investigation framework School admissions only Road traffic only Agricultural pricing only 45 / 100 Mens rea refers to: Guilty mind Guilty act Case diary Evidence bag 46 / 100 Actus reus refers to: Guilty act Guilty mind Police station Court seal 47 / 100 In most criminal cases, proof must meet the standard of: Beyond reasonable doubt Personal suspicion Balance of convenience Public pressure 48 / 100 Burden of proof generally lies on: Prosecution Accused in every case Witness Media 49 / 100 A witness who directly saw the accused access a restricted computer gives: Direct evidence Hearsay Irrelevant evidence Anonymous rumor 50 / 100 A screenshot alone may be weaker than original digital evidence because: It may lack metadata and authenticity assurance It is always inadmissible It is always stronger It proves everything automatically 51 / 100 Best way to strengthen screenshot evidence is to: Collect original source/device/logs and preserve metadata Crop it heavily Share it on social media Re-type it manually 52 / 100 Chain of custody should record: Who handled evidence, when, where, condition, and purpose Only officer’s favorite color Only accused’s age Only file extension 53 / 100 An evidence seal is broken without explanation. This may affect: Reliability and integrity of evidence Weather report Office rent Printer speed 54 / 100 A search warrant usually limits: Place, scope, item, or purpose of search according to law All court authority All defence rights All investigation 55 / 100 If evidence is collected outside lawful authority, defence may challenge: Legality and admissibility Monitor brightness Internet speed Stationery use 56 / 100 Confession means: Admission of guilt Denial of offence Bail form Search memo 57 / 100 Perjury means: False statement/evidence under oath Legal notice Bail approval Court fee 58 / 100 Hearsay generally means: Statement based on what someone else said, not personal knowledge Direct observation Original digital log Physical evidence 59 / 100 Circumstantial evidence: Requires inference from surrounding facts Is always false Is always irrelevant Needs no reasoning 60 / 100 Corroboration means: Supporting evidence from another source Destroying evidence Denying statement Closing file 61 / 100 Exculpatory evidence: Supports accused or weakens prosecution case Always proves guilt Is always hidden Is always oral 62 / 100 Conflict of interest in investigation occurs when: Personal connection may affect neutrality Evidence is sealed Court issues notice Witness appears 63 / 100 Abuse of authority means: Misuse of official power Lawful exercise of duty Neutral investigation Proper documentation 64 / 100 Money laundering investigation focuses on: Source, movement, layering, and ownership of suspicious funds Only salary slips Only office attendance Only mobile wallpaper 65 / 100 Human trafficking investigation may involve evidence of: Recruitment, transportation, coercion, exploitation, or profit Normal tourism only Legal shopping Ordinary passport renewal only 66 / 100 Article 10A relates to: Fair trial and due process National bird Sports board Airport fee 67 / 100 Article 25 provides for: Equality of citizens Federal budget only Passport color Police vehicle registration 68 / 100 Article 19 concerns: Freedom of speech Currency printing Railway timetable Provincial holidays 69 / 100 Article 2A is linked with: Cabinet Mission Plan Simla Agreement Objectives Resolution Lahore High Court Rules 70 / 100 Article 153 relates to: National flag Court dress code Freedom of trade only Council of Common Interests 71 / 100 Article 160 is related to: Fair trial Emergency arrest National anthem National Finance Commission 72 / 100 The 18th Amendment is best known for: Ending provinces Devolution/provincial autonomy Ending Parliament Creating monarchy 73 / 100 First Constitution of Pakistan was enforced in: 1947 1956 1962 1973 74 / 100 The 1962 Constitution introduced mainly: Provincial-only system Parliamentary monarchy Presidential system No executive system 75 / 100 The 1973 Constitution provides mainly: Presidential monarchy Tribal council only Parliamentary system Colonial governor rule 76 / 100 Lahore Resolution was passed in: 1930 1940 1950 1955 77 / 100 Allahabad Address was delivered in: 1930 1931 1932 1933 78 / 100 Cabinet Mission Plan came in: 1945 1946 1947 1948 79 / 100 Radcliffe Award was announced in: August 1947 August 1948 August 1949 August 1950 80 / 100 Indus Waters Treaty was signed in: 1960 1947 1948 1949 81 / 100 Section E: Extreme Math, IQ & Analytical Reasoning — 20 MCQs If 84% of a number is 336, the number is: 360 380 400 430 82 / 100 A shopkeeper marks an article 120% above cost and gives 40% discount. Net profit is: 28% 30% 32% 36% 83 / 100 80,000 is invested at 12.5% compound interest for 2 years. Compound interest is: Rs. 20,000 Rs. 21,250 Rs. 22,500 Rs. 24,000 84 / 100 A, B, and C can do work in 10, 15, and 30 days respectively. Together they complete it in: 4 days 5 days 6 days 7 days 85 / 100 A train 480 m long crosses a pole in 24 seconds. Speed is: 60 km/h 66 km/h 72 km/h 80 km/h 86 / 100 A train 360 m long crosses a 540 m platform in 45 seconds. Speed is: 60 km/h 66 km/h 72 km/h 78 km/h 87 / 100 A boat speed in still water is 20 km/h and stream speed is 5 km/h. Time to travel 75 km downstream and 45 km upstream is: 5 hours 6 hours 7 hours 8 hours 88 / 100 Find the next number: 13, 28, 59, 122, 249, ___ 502 504 506 508 89 / 100 Find the next number: 8, 19, 41, 85, 173, ___ 347 349 357 370 90 / 100 Find the next number: 5, 16, 49, 148, 445, ___ 1334 1336 1338 1339 91 / 100 Find the next letter: E, J, P, W, E, ___ L M A S 92 / 100 If x + y = 34 and xy = 273, then x² + y² =: 600 610 620 630 93 / 100 If x - y = 15 and xy = 286, then x² + y² =: 777 787 797 779 94 / 100 Ratio of two numbers is 15:23 and their sum is 456. Larger number is: 252 264 276 294 95 / 100 A number is increased by 125% and then decreased by 55.56%. Net change is approximately: 0% 5% 8% 9% 96 / 100 Average of 30 numbers is 54. If one number 112 is removed, new average is: 50 51 52 53 97 / 100 Probability of getting no tail when four coins are tossed is: 1/4 1/8 1/16 1/32 98 / 100 LCM of 54, 72, and 90 is: 360 660 960 1080 99 / 100 HCF of 198, 330, and 462 is: 33 66 99 105 100 / 100 A dishonest shopkeeper uses 650 g instead of 1 kg but sells at cost price. His gain is approximately: 35.85% 42.86% 53.85% 65.00% Your score isThe average score is 35% 0% Restart quiz Read More : FIA Past Paper 08