A security administrator needs to image a large hard drive for forensic analysis. Which of the
following will allow for faster imaging to a second hard drive?
A.
cp /dev/sda /dev/sdb bs=8k
B.
tail -f /dev/sda > /dev/sdb bs=8k
C.
dd in=/dev/sda out=/dev/sdb bs=4k
D.
locate /dev/sda /dev/sdb bs=4k
Explanation:
hmm… I’ve studied from many sources for this exam. Not one gets into specific UNIX commands. Give me a break.
0
0