PrepAway - Latest Free Exam Questions & Answers

How can a technician BEST disprove this argument?

During a trial for possession of illegal content, a defence attorney argues that several of the files on the forensic image may have been tampered with. How can a
technician BEST disprove this argument?

PrepAway - Latest Free Exam Questions & Answers

A.
Trace the chain-of-custody from the time of arrest until the time of trial

B.
Have the investigator undergo a polygraph examination

C.
Take hashes from the suspect source drive, and compare them to hashes on the forensic image

D.
Access the system logs on the forensic image, and see if any logins occurred after the suspect’s arrest


Leave a Reply