EC-Council
312-49 · Question #320
You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB storage area networks that store customer data. What method would be most efficient for you to a
Sign in or unlock 312-49 to reveal the answer and full explanation for question #320. The question stem and answer options stay visible for context.
Submitted by diego_uy· Apr 18, 2026Disk Forensics
Question
You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB storage area networks that store customer data. What method would be most efficient for you to acquire digital evidence from this network?
Options
- AMake a bit-stream disk-to-disk file
- BMake a bit-stream disk-to-image file
- CCreate a sparse data copy of a folder or file
- DCreate a compressed copy of the file with DoubleSpace
Unlock 312-49 to see the answer
You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Digital evidence acquisition#Large-scale forensics#Sparse copying#Forensic efficiency