312-49 · Question #507
Which of the following technique creates a replica of an evidence media?
The correct answer is C. Bit Stream Imaging. Bit Stream Imaging (also called forensic imaging or disk cloning) creates an exact sector-by-sector, bit-for-bit duplicate of an entire storage media, including deleted files, slack space, unallocated space, and file system metadata. This is the forensically sound method for…
Question
Which of the following technique creates a replica of an evidence media?
Options
- AData Extraction
- BBackup
- CBit Stream Imaging
- DData Deduplication
How the community answered
(34 responses)- A3% (1)
- C94% (32)
- D3% (1)
Explanation
Bit Stream Imaging (also called forensic imaging or disk cloning) creates an exact sector-by-sector, bit-for-bit duplicate of an entire storage media, including deleted files, slack space, unallocated space, and file system metadata. This is the forensically sound method for replicating evidence because it preserves everything on the original media. A standard Backup only copies active files and does not capture deleted data or unallocated space. Data Extraction pulls specific data out rather than replicating the whole media. Data Deduplication eliminates redundant data, making it unsuitable for forensic replication.
Topics
Community Discussion
No community discussion yet for this question.