An investigator finds a USB drive at a crime scene and wants to present it as evidence in court. The investigator takes the USB drive and creates a forensic image of it and takes a hash of both the original USB device and the image that was created. What is the investigator attempting to prove about the USB drive when the evidence is submitted in court?

  • An exact copy cannot be made of a device.
  • The data in the image is an exact copy and nothing has been altered by the process.
  • The data is all there.
  • The investigator found a USB drive and was able to make a copy of it.
Для просмотра статистики ответов нужно войти.