EC-Council
312-49V9 · Question #371
312-49V9 Question #371: Real Exam Question with Answer & Explanation
The correct answer is D. Restore a disk from an image file. See the full explanation below for the reasoning.
Question
Using Linux to carry out a forensics investigation, what would the following command accomplish? dd if=/usr/home/partition.image of=/dev/sdb2 bs=4096 conv=notrunc,noerror
Options
- ASearch for disk errors within an image file
- BBackup a disk to an image file
- CCopy a partition to an image file
- DRestore a disk from an image file
Community Discussion
No community discussion yet for this question.