nerdexam
EC-Council

312-49 · Question #328

In General, __________________ Involves the investigation of data that can be retrieved from the hard disk or other disks of a computer by applying scientific methods to retrieve the data.

The correct answer is D. Computer Forensics. Computer Forensics is the discipline of applying scientific methods to identify, preserve, extract, analyze, and present digital evidence from computer storage media. It specifically focuses on data recovery and analysis from hard disks and other storage devices in a…

Submitted by minji_kr· Apr 18, 2026Computer Forensics in Today's World

Question

In General, __________________ Involves the investigation of data that can be retrieved from the hard disk or other disks of a computer by applying scientific methods to retrieve the data.

Options

  • ANetwork Forensics
  • BData Recovery
  • CDisaster Recovery
  • DComputer Forensics

How the community answered

(58 responses)
  • A
    2% (1)
  • B
    3% (2)
  • C
    2% (1)
  • D
    93% (54)

Explanation

Computer Forensics is the discipline of applying scientific methods to identify, preserve, extract, analyze, and present digital evidence from computer storage media. It specifically focuses on data recovery and analysis from hard disks and other storage devices in a forensically sound manner (maintaining chain of custody and evidence integrity). Network Forensics (A) deals with network traffic and logs. Data Recovery (B) is a technical process but lacks the legal/investigative framework. Disaster Recovery (C) is about restoring systems after failures.

Topics

#Computer Forensics definition#Disk data investigation#Scientific methods#Digital evidence

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice