In order to make a forensically sound copy of a hard disk for analysis, it is critical that you employ a write-blocker. What does this device do that makes for a sound copy?
a. It performs bit by bit error correction of each sector of the source hard disk as it is copied to the target medium.
b. It prevents rootkits from destroying the data when it detects the lauch of a copy routine.
c. It prevents the OS from making any changes to the metadata of files as they are being copied.
d. It is capable of reading the system files that are generally invisible to the host operating system of the target device.
c.
You might also like to view...
Which one of these is not the name of a C library function?
a. printf b. sqrt c. void d. scanf e. log
Describe how a computer uses its ARP table and the ARP protocol when preparing to transmit a packet to the local network.
What will be an ideal response?
____-based graphics can scale and compress to a very small file size without losing quality.
A. JavaScript B. MP3 C. Vector D. Bitmap
When a computer is embedded into a device, it requires input from the user to perform its task.
Answer the following statement true (T) or false (F)