Which of the following is the best way to establish and verify the integrity of...

GIAC GCED Question Answer

Which of the following is the best way to establish and verify the integrity of a file before copying it during an investigation?

Write down the file size of the file before and after copying and ensure they match

Ensure that the MAC times are identical before and after copying the file

Establish the chain of custody with the system description to prove it is the same image

Create hash of the file before and after copying the image verifying they are identical

GCED PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"