nerdexam
EC-Council

312-49V11 · Question #41

As part of a forensic investigation into a suspected data breach at a corporate office, Detective Smith is tasked with gathering evidence from a seized hard drive. The detective aims to extract…

Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #41. The question stem and answer options stay visible for context.

Data Acquisition and Duplication

Question

As part of a forensic investigation into a suspected data breach at a corporate office, Detective Smith is tasked with gathering evidence from a seized hard drive. The detective aims to extract non-volatile data from the storage media in an unaltered manner to uncover any traces of unauthorized access or tampering. In Detective Smith's investigation of the corporate data breach, which data acquisition process involves extracting non-volatile data from the seized hard drive?

Options

  • ADynamic acquisition
  • BDead acquisition
  • CVolatile acquisition
  • DLive acquisition

Unlock 312-49V11 to see the answer

You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#dead acquisition#non-volatile data#data acquisition types#hard drive forensics
Full 312-49V11 Practice