CompTIA CySA+ CS0-003 Practice Question
During a forensic analysis of a breached system, what is the primary purpose of creating a forensic disk image?
To automatically detect malicious files on the system
To simplify the identification of Indicators of Compromise (IoCs)
To preserve the integrity of the original data by ensuring it remains unaltered
To increase the speed of the forensic analysis by utilizing faster storage media