Which statement is true about using FTK Imager to simultaneously create multiple images of a single source?

Question

Options

• AIn the Image Creation Wizard, you should select the Add Additional Drives option.
• BYou should use the Create Multiple Images option to create server image objects.
• CYou should note the evidence item source signature and add it to the Image View pane.
• DIn the Image Creation Wizard, you should add multiple destination jobs from the same source prior To beginning image creation.

• A
  5% (3)
• B
  2% (1)
• C
  2% (1)
• D
  92% (55)

Explanation

FTK Imager allows you to add multiple destination jobs from the same source within a single Image Creation Wizard session before clicking "Start," so the drive is read only once while simultaneously writing to multiple output destinations - this is both efficient and forensically sound since it minimizes repeated access to the evidence.

Why the others are wrong:

• A is incorrect because there is no "Add Additional Drives" option in the Image Creation Wizard; that phrasing misrepresents the actual UI.
• B is incorrect because "Create Multiple Images" and "server image objects" are not standard FTK Imager terminology or workflows.
• C is incorrect because noting the evidence source signature and using the Image View pane are verification/review steps, not part of the simultaneous creation process.

Memory tip: Think of it as a "one read, many writes" approach - you configure all your destination jobs before you start, like setting up multiple copy targets before pressing copy. In FTK Imager, "Add" adds a destination, not a source.

No community discussion yet for this question.