Cisco
200-201 · Question #555
What is the difference between tampered and untampered disk images?
The correct answer is D. Tampered images store hidden items inside. A tampered disk image has been altered from its original forensic state, meaning data may have been added, removed, or hidden within it, which compromises its integrity and can conceal or modify evidence.
Submitted by olafpl· Mar 6, 2026Host-Based Analysis
Question
What is the difference between tampered and untampered disk images?
Options
- AUntampered images are not secure.
- BTampered images are secure.
- CUntampered images store hidden items inside.
- DTampered images store hidden items inside.
How the community answered
(24 responses)- B8% (2)
- C4% (1)
- D88% (21)
Explanation
A tampered disk image has been altered from its original forensic state, meaning data may have been added, removed, or hidden within it, which compromises its integrity and can conceal or modify evidence.
Topics
#disk imaging#forensics#tampering
Community Discussion
No community discussion yet for this question.