Free CompTIA CySA+ CS0-003 Practice Question

During a forensic analysis of a breached system, what is the primary purpose of creating a forensic disk image?

  • To preserve the integrity of the original data by ensuring it remains unaltered

  • To simplify the identification of Indicators of Compromise (IoCs)

  • To increase the speed of the forensic analysis by utilizing faster storage media

  • To automatically detect malicious files on the system

This question's topic:
CompTIA CySA+ CS0-003 / 
Incident Response and Management
Your Score:

Check or uncheck an objective to set which questions you will receive.