ECCouncil Computer Hacking Forensic Investigator 312-49 Question # 32 Topic 4 Discussion

ECCouncil Computer Hacking Forensic Investigator 312-49 Question # 32 Topic 4 Discussion

312-49 Exam Topic 4 Question 32 Discussion:
Question #: 32
Topic #: 4

You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB storage area networks that store customer data.

What method would be most efficient for you to acquire digital evidence from this network?


A.

create a compressed copy of the file with DoubleSpace


B.

create a sparse data copy of a folder or file


C.

make a bit-stream disk-to-image file


D.

make a bit-stream disk-to-disk file


Get Premium 312-49 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.