nerdexam
GIAC

GCFE · Question #42

How can 'forensic imaging' of drives be useful beyond creating a copy for analysis?

The correct answer is A. It can be used to recover data that has been deleted or damaged. See the full explanation below for the reasoning.

Question

How can 'forensic imaging' of drives be useful beyond creating a copy for analysis?

Options

  • AIt can be used to recover data that has been deleted or damaged.
  • BIt provides a real-time backup of all system activities.
  • CIt helps in upgrading system hardware.
  • DIt tracks user logins and logouts.

How the community answered

(40 responses)
  • A
    78% (31)
  • B
    8% (3)
  • C
    13% (5)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full GCFE Practice