Accenture interview question

Difference between UDP and TCP. How does DNS work? What forensic tools do you use?