CompTIA CySA+ CS0-003 Practice Question
During a forensic analysis of a breached system, what is the primary purpose of creating a forensic disk image?
To increase the speed of the forensic analysis by utilizing faster storage media
To automatically detect malicious files on the system
To simplify the identification of Indicators of Compromise (IoCs)
To preserve the integrity of the original data by ensuring it remains unaltered