Comp TIA Security + Certification Questions Part 6

© examsiri.com

Question : 57 of 68

Marks: +1, -0

Which of the following needs to be performed during a forensics investigation to ensure the data contained in a drive image has not been compromised?

Follow the proper chain of custody procedures.
Compare the image hash to the original hash.
Ensure a legal hold has been placed on the image.
Verify the time offset on the image file.

Go to Question:

Prev Question

Next Question