GIAC

GCFE · Question #143

What is the primary purpose of creating a forensic image of a hard drive?

The correct answer is C. To create an exact copy for analysis while preserving the original evidence. See the full explanation below for the reasoning.

Question

What is the primary purpose of creating a forensic image of a hard drive?

Options

ATo enhance the performance of the drive
BTo recover deleted files
CTo create an exact copy for analysis while preserving the original evidence
DTo install new software

How the community answered

(18 responses)

A
6% (1)
B
6% (1)
C
78% (14)
D
11% (2)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GCFE Practice