CompTIA CySA+ CS0-003 Practice Question
During a forensic analysis of a breached system, what is the primary purpose of creating a forensic disk image?
To automatically detect malicious files on the system
To simplify the identification of Indicators of Compromise (IoCs)
To increase the speed of the forensic analysis by utilizing faster storage media
To preserve the integrity of the original data by ensuring it remains unaltered