EC-Council
312-49V11 · Question #21
312-49V11 Question #21: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #21. The question stem and answer options stay visible for context.
Question
Gianna, a forensic investigator, is tasked with ensuring the integrity of the forensic image file she created from a suspect's hard drive. To verify that the image file matches the original drive, she needs to use a command that compares the image file to the original medium. Which of the following dcfldd commands should she use to perform the verification?
Options
- Adcfldd if=/dev/sda vf=image.dd
- Bdcfldd if=/dev/sda split=2M of=usbimg hash=md5 hashlog=usbhash.log
- Cdcfldd if=/dev/sda of=usbimg.dat
- Ddd if=/dev/sdb | split -b 650m -image_sdb
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.