Which of the following supplies non-repudiation during a forensics investigation?
A.
Dumping volatile memory contents first
B.
Duplicating a drive with dd
C.
a SHA 2 signature of a drive image
D.
Logging everyone in contact with evidence
E.
Encrypting sensitive data
The Answer Is:
C
This question includes an explanation.
Explanation:
A SHA 2 signature is a cryptographic hash function that produces a unique and fixed-length output for any given input. It can provide non-repudiation during a forensics investigation by verifying the integrity and authenticity of a drive image and proving that it has not been altered or tampered with since it was created
SY0-601 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 60% Discount on All Products,
Use Coupon: "8w52ceb345"