اضغط هنا للانضمام الى قروب فوجي للإختبارات على تيليقرام

اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 155 من 1040

كل الأسئلة

An analyst is imaging a hard drive that was obtained from the system of an employee who is suspected of going rogue. The analyst notes that the initial hash of the evidence drive does not match the resultant hash of the imaged copy. Which of the following best describes the reason for the conflicting investigative findings?

الخيارات

  • A Chain of custody was not maintained for the evidence drive.
  • B Legal authorization was not obtained prior to seizing the evidence drive.
  • C Data integrity of the imaged drive could not be verified.
  • D Evidence drive imaging was performed without a write blocker.

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.