Free CompTIA Security+ SY0-601 Practice Question

During an investigation of unauthorized data exfiltration, a security analyst needs to securely acquire the data from a suspect's computer for analysis. Which of the following tools should the analyst use to ensure the integrity of the evidence is maintained while performing a bit-by-bit copy of the hard drive?

  • WinHex

  • Autopsy

  • Memdump

  • dd

This question's topic:
CompTIA Security+ SY0-601 / 
Operations and Incident Response
Your Score:

Check or uncheck an objective to set which questions you will receive.