Guidance_Software
GD0-100 · Question #97
A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:
The correct answer is A. An MD5 hash. See the full explanation below for the reasoning.
Question
A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:
Options
- AAn MD5 hash
- BA 32 bit CRC
- CA running log
- DNothing. Restored volumes are not verified.
How the community answered
(22 responses)- A73% (16)
- B9% (2)
- C14% (3)
- D5% (1)
Community Discussion
No community discussion yet for this question.