The process of retrieving evidence from the data of an encrypted hard drive would be considered the job of which of the following?
A) network forensics expert
B) e-discovery expert
C) ESI administrator
D) device forensics expert

Question

Quizplus · Accepted Answer

The job of retrieving evidence from an encrypted hard drive falls under device forensics, which is the process of extracting information from digital devices such as smartphones, computers, and hard drives. A device forensics expert would have the necessary skills and tools to decrypt the hard drive and gather the evidence needed for an investigation.

The Process of Retrieving Evidence from the Data of an Encrypted