312-49 · Question #550
Which of the following tool enables data acquisition and duplication?
The correct answer is B. DriveSpy. DriveSpy is a forensic tool specifically designed for data acquisition and duplication of hard drives and storage media, supporting bit-for-bit imaging in a forensically sound manner. Colasoft's Capsa is a network protocol analyzer, Wireshark is a packet capture and analysis…
Question
Which of the following tool enables data acquisition and duplication?
Options
- AColasoft's Capsa
- BDriveSpy
- CWireshark
- DXplico
How the community answered
(22 responses)- A5% (1)
- B86% (19)
- D9% (2)
Explanation
DriveSpy is a forensic tool specifically designed for data acquisition and duplication of hard drives and storage media, supporting bit-for-bit imaging in a forensically sound manner. Colasoft's Capsa is a network protocol analyzer, Wireshark is a packet capture and analysis tool, and Xplico is a network forensics tool for reconstructing content from captured traffic - none of these are designed for disk acquisition or duplication.
Topics
Community Discussion
No community discussion yet for this question.