In order to make a forensically sound copy of a hard disk for analysis, it is critical that you employ a write-blocker. What does this device do that makes for a sound copy?

a. It performs bit by bit error correction of each sector of the source hard disk as it is copied to the target medium.
b. It prevents rootkits from destroying the data when it detects the lauch of a copy routine.
c. It prevents the OS from making any changes to the metadata of files as they are being copied.
d. It is capable of reading the system files that are generally invisible to the host operating system of the target device.

c.

Computer Science & Information Technology

You might also like to view...

The interval by which the time marker is incremented is specified by the user in the ________ .

a) window.setInterval method b) Index propery setting c) Duration property setting d) AutoStart property setting

Computer Science & Information Technology

A(n) ____________________ code is a specially designed code in which special check bits have been added to data bits such that, if an error occurs during transmission, the receiver may be able to correct the error using the included check and data bits.?

Fill in the blank(s) with the appropriate word(s).

Computer Science & Information Technology