Cisco
200-201 · Question #461
A cyber security engineer is performing a forensic investigation on a system. What is evidence that data has been modified?
Sign in or unlock 200-201 to reveal the answer and full explanation for question #461. The question stem and answer options stay visible for context.
Submitted by zhang_li· Mar 6, 2026Host-Based Analysis
Question
A cyber security engineer is performing a forensic investigation on a system. What is evidence that data has been modified?
Options
- AAn untampered image has the same stored and computed hash.
- BA tampered image has the same stored and computed hash.
- CAn untampered image has a different stored and computed hash.
- DA tampered image has a different stored and computed hash.
Unlock 200-201 to see the answer
You've previewed enough free 200-201 questions. Unlock 200-201 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Digital Forensics#Data Integrity#Hashing#Evidence Tampering