What is a difference between tampered and untampered disk images?
A.
Tampered images have the same stored and computed hash.
B.
Tampered images are used as evidence.
C.
Untampered images are used for forensic investigations.
D.
Untampered images are deliberately altered to preserve as evidence
The Answer Is:
C
This question includes an explanation.
Explanation:
Tampered images are disk images that have been modified or altered in some way after they were captured from the original source. Tampered images may have different stored and computed hash values, which indicate that the integrity of the image has been compromised. Tampered images are not reliable or valid sources of evidence for forensic investigations, as they may contain false or misleading information. Untampered images are disk images that have not been changed or manipulated after they were acquired from the original source. Untampered images have the same stored and computed hash values, which verify that the image is an exact copy of the original disk. Untampered images are used for forensic investigations, as they preserve the original state and content of the disk and provide accurate and trustworthy evidence. References:
Contrasting tampered and untampered disk images
What is a difference between tampered and untampered disk images?
200-201 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"