Guidance_Software
GD0-110 · Question #97
A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:
The correct answer is A. An MD5 hash. See the full explanation below for the reasoning.
Question
A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive. EnCase verifies the restored copy using:
Options
- AAn MD5 hash
- BA 32 bit CRC
- CA running log
- DNothing. Restored volumes are not verified.
How the community answered
(35 responses)- A74% (26)
- B17% (6)
- C3% (1)
- D6% (2)
Community Discussion
No community discussion yet for this question.