Which of the following needs to be performed during a forensics investigation to ensure the data contained in a drive image has not been compromised?
A) Follow the proper chain of custody procedures.
B) Compare the image hash to the original hash.
C) Ensure a legal hold has been placed on the image.
D) Verify the time offset on the image file.
Correct Answer:
Verified
Q974: Which of the following access management concepts
Q975: Which of the following locations contain the
Q976: A company is planning to build an
Q977: A security analyst is attempting to identify
Q978: An employee workstation with an IP address
Q980: A security engineer must install the same
Q981: The Chief Executive Officer (CEO) of an
Q982: A security analyst is investigating a call
Q983: A security technician has been given the
Q984: A technician is recommending preventive physical security
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents