312-49V11: Computer Hacking Forensic InvestigatorDemo

By ECCouncil · Question Mode

QuestionQ70

Tools/Systems/Programs

Zachary, a digital forensic analyst, is handling a cyber-espionage case involving an old workstation. The workstation used an Integrated Drive Electronics (IDE) hard disk drive that failed because of a power surge, leaving it unreadable. Zachary believes the drive contains pivotal evidence that could assist the investigation. However, the workstation’s motherboard was also damaged in the incident, and all of Zachary’s available systems are modern and have only SATA connectors. Therefore, he cannot directly attach the IDE drive to those systems.

What should Zachary do in this situation to retrieve the data from the IDE hard drive?

  • A Zachary should send the IDE drive to a specialized data recovery service.
  • B Zachary should use a SATA to IDE adapter to connect the IDE hard drive to his modern systems.
  • C Zachary should try to repair the damaged workstation’s motherboard.
  • D Zachary should attempt to extract the platters from the IDE drive and place them in a working SATA drive.
Explanation

A power-surge failure that leaves a hard disk unreadable may involve damaged electronics or internal mechanical components. A specialized data-recovery service has appropriate diagnostic equipment, controlled handling procedures, and recovery capabilities; an interface adapter only resolves connector compatibility and cannot restore a failed disk.

Community Discussion

No comments yet. Be the first to start the discussion!