CiscoCisco
200-201 · Question #282
200-201 Question #282: Real Exam Question with Answer & Explanation
Sign in or unlock 200-201 to reveal the answer and full explanation for question #282. The question stem and answer options stay visible for context.
Submitted by obi.ng· Mar 6, 2026Host-Based Analysis
Question
What are two differences between tampered disk images and untampered disk images? (Choose two.)
Options
- AThe image is tampered if the stored hash and the computed hash are identical.
- BTampered images are used as an element for the root cause analysis report.
- CUntampered images can be used as law enforcement evidence.
- DTampered images are used in a security Investigation process.
- EThe image is untampered if the existing stored hash matches the computed one.
Unlock 200-201 to see the answer
You've previewed enough free 200-201 questions. Unlock 200-201 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Digital forensics#Disk imaging#Hashing#Evidence integrity