CompTIA CySA+ CS0-003 Practice Question
During a forensic analysis of a breached system, what is the primary purpose of creating a forensic disk image?
To simplify the identification of Indicators of Compromise (IoCs)
To preserve the integrity of the original data by ensuring it remains unaltered
To increase the speed of the forensic analysis by utilizing faster storage media
To automatically detect malicious files on the system