A security administrator suspects an employee has been emailing proprietary information to a competitor. Company policy requires the administrator to capture an exact copy of the employee's hard disk. Which of the following should the administrator use?
A) dd
B) chmod
C) dnsenum
D) logger

Question

Quizplus · Accepted Answer

The 'dd' command is used to create an exact copy or image of a hard disk, which is necessary for capturing the employee's hard disk as per company policy.

A Security Administrator Suspects an Employee Has Been Emailing Proprietary