Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam 212-89 topic 1 question 161 discussion

Actual exam question from ECCouncil's 212-89
Question #: 161
Topic #: 1
[All 212-89 Questions]

Bit stream image copy of the digital evidence must be performed in order to:

  • A. Prevent alteration to the original disk
  • B. Copy the FAT table
  • C. Copy all disk sectors including slack space
  • D. All the above
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Gianmm99
3 weeks, 1 day ago
Selected Answer: D
La creación de una copia de imagen de flujo de bits de la evidencia digital garantiza la preservación del disco original al prevenir su alteración. Además, incluye la copia de la tabla de asignación de archivos (FAT) y todos los sectores del disco, incluido el espacio no utilizado (slack space).
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...