CiscoCisco
200-201 · Question #558
200-201 Question #558: Real Exam Question with Answer & Explanation
Sign in or unlock 200-201 to reveal the answer and full explanation for question #558. The question stem and answer options stay visible for context.
Submitted by the_admin· Mar 6, 2026Host-Based Analysis
Question
What is a key difference between a tampered and an untampered disk image during a forensic investigation?
Options
- AAn untampered image is encrypted, and a tampered one is not encrypted.
- BA tampered image has a different hash value, and untampered has the hash value unchanged.
- CA tampered image is accessible only by administrators, and an untampered one is accessible by
- DAn untampered image is compressed, and a tampered one is left uncompressed.
Unlock 200-201 to see the answer
You've previewed enough free 200-201 questions. Unlock 200-201 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#disk imaging#forensic integrity#hashing#evidence tampering