A security analyst is examining a former employee’s laptop for suspected evidence of suspicious activity. The analyst uses dd during the investigation. Which of the following best explains why the analyst is using this tool?
A.
To capture an image of the hard drive
B.
To reverse engineer binary programs
C.
To recover deleted logs from the laptop
D.
To deduplicate unnecessary data from the hard drive
o dd command is a low-level utility that creates a bit-for-bit copy of a disk, essentially capturing an exact image of the hard drive. This is crucial in forensic investigations as it preserves the original state of the evidence, ensuring that any analysis done on the image does not alter the original data.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CAS-004 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Steel16
2 months ago