Why should the imaging of drives always be initiated by booting the suspect drive from a previously verified forensic floppy?
a. New floppy drives bear the danger of being virus carriers.
b. A previously verified forensic floppy can detect anomalies in the drive faster.
c. Some users will configure their system to erase/modify data if third-party access is determined.
d. The verified forensic floppy can disable the write-blocking program found on most original media.
Answer: c
You might also like to view...
In the following pseudocode which uses recursion to find the factorial of a number, which is the recursive case?
``` Module main() Declare Integer number Declare Integer numFactor Display "Enter a non-negative integer:" Input number Set numFactor = factor(number) Display "The factorial of ", number, " is ", numFactor End Module Function Integer factor(Integer n) If n == 0 Then Return 1 Else Return n * factor(n - 1) End If End Function ``` a. n == 0 b. n * factor(n - 1) c. factor(n - 1) d. n > 0
A(n) ______ is a potentially damaging program that affects, or infects, a computer or mobile device negatively by altering the way the computer or device works without the user's knowledge or permission.
Fill in the blank(s) with the appropriate word(s).