List of questions
Related questions
Question 100 - ECSS discussion
Sarah, a forensic investigator, is working on a criminal case. She was provided with all the suspect devices. Sarah employs an imaging software tool for duplicating the original data from the suspect devices. However, the tool she employed failed to image the data as the suspect version of the drive was very old and incompatible with imaging software. Hence, Sarah used an alternative data acquisition technique and succeeded in imaging the data.
Which of the following types of data acquisition techniques did Sarah employ in the above scenario?
A.
Bit-stream disk-to-disk
B.
Bit-stream disk-to-image file
C.
Sparse acquisition
D.
Logical acquisition
Your answer:
0 comments
Sorted by
Leave a comment first