312-49 · Question #509
Which of the following tool creates a bit-by-bit image of an evidence media?
The correct answer is C. AccessData FTK Imager. AccessData FTK Imager is a widely used forensic tool that creates bit-for-bit forensic images of storage media in formats such as E01 (EnCase), AFF, and raw DD. It captures every bit on the source drive, including slack space, unallocated clusters, and deleted data, and…
Question
Which of the following tool creates a bit-by-bit image of an evidence media?
Options
- ARecuva
- BFileMerlin
- CAccessData FTK Imager
- DXplico
How the community answered
(17 responses)- A6% (1)
- C88% (15)
- D6% (1)
Explanation
AccessData FTK Imager is a widely used forensic tool that creates bit-for-bit forensic images of storage media in formats such as E01 (EnCase), AFF, and raw DD. It captures every bit on the source drive, including slack space, unallocated clusters, and deleted data, and generates cryptographic hash values (MD5/SHA1) to verify image integrity. Recuva is a file recovery tool, not an imaging tool. FileMerlin is a file conversion utility. Xplico is a network forensics tool used for packet capture analysis, not disk imaging.
Topics
Community Discussion
No community discussion yet for this question.