What is the PRIMARY reason that a bit-level copy is more desirable than a file-level copy when replicating a hard drive's contents for an e-discovery investigation?

Question

Options

• AFiles that have been deleted will be transferred.
• BThe file and directory structure is retained.
• CFile-level security settings will be preserved.
• DThe corruption of files is less likely.

• A
  91% (20)
• B
  5% (1)
• D
  5% (1)

Explanation

A bit-level copy is more desirable than a file-level copy when replicating a hard drive's contents for an e-discovery investigation, because it preserves the data in the unallocated space and the slack space of the drive, which may contain deleted files or fragments of files that are relevant to the investigation. A file-level copy only copies the data that is accessible by the file system, and may miss important evidence. The file and directory structure, the file-level security settings, and the corruption of files are not affected by the choice of copy method, as long as the copy is done

No community discussion yet for this question.