nerdexam
EC-Council

212-82 · Question #25

Ruben, a crime investigator, wants to retrieve all the deleted files and folders in the suspected media without affecting the original files. For this purpose, he uses a method that involves the creat

Sign in or unlock 212-82 to reveal the answer and full explanation for question #25. The question stem and answer options stay visible for context.

Submitted by marco_it· Mar 6, 2026Cloud Security Operations & Incident Response

Question

Ruben, a crime investigator, wants to retrieve all the deleted files and folders in the suspected media without affecting the original files. For this purpose, he uses a method that involves the creation of a cloned copy of the entire media and prevents the contamination of the original media. Identify the method utilized by Ruben in the above scenario.

Options

  • ASparse acquisition
  • BBit-stream imaging
  • CDrive decryption
  • DLogical acquisition

Unlock 212-82 to see the answer

You've previewed enough free 212-82 questions. Unlock 212-82 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#digital forensics#data acquisition#bit-stream imaging#evidence preservation
Full 212-82 Practice