How does EnCase verify that the evidence file contains an exact copy of the suspect hard drive?

Question

Options

• ABy means of an MD5 hash of the suspect hard drive compared to an MD5 hash of the data stored
• BBy means of a CRC value of the suspect hard drive compared to a CRC value of the data stored
• CBy means of an MD5 hash value of the evidence file itself.
• DBy means of a CRC value of the evidence file itself.

• A
  84% (43)
• B
  4% (2)
• C
  2% (1)
• D
  10% (5)

No community discussion yet for this question.