QuestionQ1016

Incident Management

The PRIMARY purpose of creating and externally storing a disk hash value while performing forensic data acquisition from a hard disk is to:

  • A validate the integrity during analysis
  • B provide backup in case of media failure
  • C reinstate original data when accidental changes occur
  • D validate the confidentiality during analysis
Explanation

A recorded disk hash provides a reference value for confirming that forensic data remains unchanged during storage and analysis, thereby validating its integrity.

Community Discussion

No comments yet. Be the first to start the discussion!