CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ30

VerifiedSecurity Assessment and Testing

What is the PRIMARY reason a bit-level copy is preferable to a file-level copy when replicating a hard drive’s contents for an e-discovery investigation?

Explanation

A bit-level copy captures the entire storage medium, including unallocated space that can contain deleted files or recoverable remnants. A file-level copy normally transfers only files that are currently active in the file system.

Community Discussion

No comments yet. Be the first to start the discussion!