Access_Data
A30-327 · Question #10
A30-327 Question #10: Real Exam Question with Answer & Explanation
The correct answer is A. suspect.001.txt. See the full explanation below for the reasoning.
Question
You create two evidence images from the suspect's drive: suspect.E01 and suspect.001. You want to be able to verify that the image hash values are the same for suspect.E01 and suspect.001 image files. Which file has the hash value for the Raw (dd) image?
Options
- Asuspect.001.txt
- Bsuspect.E01.txt
- Csuspect.001.csv
- Dsuspect.E01.csv
Community Discussion
No community discussion yet for this question.