What can be used to make an exact replica of hard disk drive as part of the evidence acquisition process?

A.
Disk imaging software

B.
Partition archival tool

C.
Binary backup utility

D.
Memory dumper

Explanation:
Answer C is correct; a binary backup utility is what is needed to ensure that every single bit on a hard drive is copied. Slack and unallocated space is needed for a forensically sound image.

Incorrect Answers and Explanations: A, B, and D: Answers A, B, and D are incorrect. The most viable, but incorrect choice was A, disk imaging software. While some disk imaging software provides bit by bit backup capabilities, typical usage will only acquire allocated space. D, memory dumper would apply to physical memory rather than a hard disk drive. B is just a made up phrase that sounds legitimate.