CAS-003 · Question #451
The Chief Information Security Officer (CISO) of an established security department, identifies a customer who has been using a fraudulent credit card. The CISO calls the local authorities, and when…
The correct answer is A. creating a forensic image. One of the most important steps in computer forensic evidence procedures is to capture exact duplicates of the evidence, also known as forensic images. This is accomplished by making a bit- for-bit copy of a piece of media as an image file with high accuracy. In addition…
Question
The Chief Information Security Officer (CISO) of an established security department, identifies a customer who has been using a fraudulent credit card. The CISO calls the local authorities, and when they arrive on- site, the authorities ask a security engineer to create a point-in-time copy of the running database in their presence. This is an example of:
Options
- Acreating a forensic image
- Bdeploying fraud monitoring
- Cfollowing a chain of custody
- Danalyzing the order of volatility
How the community answered
(31 responses)- A87% (27)
- B6% (2)
- C3% (1)
- D3% (1)
Explanation
One of the most important steps in computer forensic evidence procedures is to capture exact duplicates of the evidence, also known as forensic images. This is accomplished by making a bit- for-bit copy of a piece of media as an image file with high accuracy. In addition, dumping a system’s memory may reveal actionable evidence that would otherwise be lost when the system is powered down.
Topics
Community Discussion
No community discussion yet for this question.