The MD5 program is used to:

The correct answer is D. verify that a disk is not altered when you examine it. MD5 (Message Digest Algorithm 5) generates a unique 128-bit cryptographic hash (checksum) of data. In digital forensics, MD5 hashes are computed on evidence drives before and after examination to verify that no data has been altered during the investigation process. If the hash…

Submitted by chen.hong· Apr 18, 2026Disk Forensics

Question

Options

Awipe magnetic media before recycling it
Bmake directories on a evidence disk
Cview graphics files on an evidence drive
Dverify that a disk is not altered when you examine it

How the community answered

(54 responses)

A
2% (1)
B
6% (3)
C
4% (2)
D
89% (48)

Explanation

MD5 (Message Digest Algorithm 5) generates a unique 128-bit cryptographic hash (checksum) of data. In digital forensics, MD5 hashes are computed on evidence drives before and after examination to verify that no data has been altered during the investigation process. If the hash value remains identical, the integrity of the evidence is confirmed. This is a foundational principle of forensic chain-of-custody and evidence integrity.

Topics

#MD5#Hashing#Data Integrity#Evidence Integrity

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice