What is the purpose of the reconstruction function in a forensics investigation?
A)Prove that two sets of data are identical.
B)Copy all information from a suspect's drive, including information that may have been hidden.
C)Re-create a suspect's drive to show what happened during a crime or incident.
D)Generate reports or logs that detail the processes undertaken by a forensics investigator.

Question

​What is the purpose of the reconstruction function in a forensics investigation?
A)​Prove that two sets of data are identical.
B)​Copy all information from a suspect's drive, including information that may have been hidden.
C)Re-create a suspect's drive to show what happened during a crime or incident.
D)Generate reports or logs that detail the processes undertaken by a forensics investigator.

Quizplus · Accepted Answer

The purpose of the reconstruction function in a forensics investigation is to re-create the suspect's drive to show what happened during a crime or incident. It is used to analyze data and piece together a timeline of events to help understand how a crime was committed. The reconstruction function is not used to prove that two sets of data are identical, copy all information from a suspect's drive, or generate reports or logs detailing the processes undertaken by a forensics investigator.

​What Is the Purpose of the Reconstruction Function in a Forensics

What Is the Purpose of the Reconstruction Function in a Forensics