EC-Council
312-49V11 · Question #161
312-49V11 Question #161: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #161. The question stem and answer options stay visible for context.
Question
During a forensic investigation into a suspected data breach, the investigator discovers that the attacker has intentionally tampered with the digital storage media to erase evidence. Upon examination, the investigator finds that all addressable locations on the storage device have been replaced with arbitrary characters, making it impossible to recover the legitimate files that were originally stored on the drive, even with advanced forensic tools. Which anti-forensic technique was used by the attacker in this case?
Options
- AThe attacker uses encryption to protect the file data and prevent recovery.
- BThe attacker uses strong magnetic fields to erase file data without leaving recoverable traces.
- CThe attacker physically damages the device to ensure no file data can be recovered.
- DThe attacker uses irrelevant entries to substitute data in the files to inhibit recovery.
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.