A Forensics Analyst Is Investigating a Hard Drive for Evidence

question 253

Multiple Choice

A forensics analyst is investigating a hard drive for evidence of suspected illegal activity. Which of the following should the analyst do FIRST?

• A) Create a hash of the hard drive.
• B) Export the Internet history.
• C) Save a copy of the case number and date as a text file in the root directory.
• D) Back up the pictures directory for further inspection.

---

Definitions:

Menstrual Cycle

The regular natural change that occurs in the female reproductive system that makes pregnancy possible.

Symptoms

Signs or indications of a disease or condition experienced by an individual.

REM Sleep

A unique phase of sleep characterized by rapid eye movement, low muscle tone, and the propensity to dream vividly.

Physiological Changes

Alterations in the body's normal biological functions, which can be due to various factors such as stress, exercise, or illness.