GIAC
GCED · Question #8
GCED Question #8: Real Exam Question with Answer & Explanation
The correct answer is B. Create a one-way hash of the original media. See the full explanation below for the reasoning.
Question
What should happen before acquiring a bit-for-bit copy of suspect media during incident response?
Options
- AEncrypt the original media to protect the data
- BCreate a one-way hash of the original media
- CDecompress files on the original media
- DDecrypt the original media
Community Discussion
No community discussion yet for this question.