EC-Council
312-49V9 · Question #371
Using Linux to carry out a forensics investigation, what would the following command accomplish? dd if=/usr/home/partition.image of=/dev/sdb2 bs=4096 conv=notrunc,noerror
The correct answer is D. Restore a disk from an image file. See the full explanation below for the reasoning.
Question
Using Linux to carry out a forensics investigation, what would the following command accomplish? dd if=/usr/home/partition.image of=/dev/sdb2 bs=4096 conv=notrunc,noerror
Options
- ASearch for disk errors within an image file
- BBackup a disk to an image file
- CCopy a partition to an image file
- DRestore a disk from an image file
How the community answered
(35 responses)- A3% (1)
- B11% (4)
- C9% (3)
- D77% (27)
Community Discussion
No community discussion yet for this question.