Which of the Following Needs to Be Performed During a Forensics

question 276

Multiple Choice

Which of the following needs to be performed during a forensics investigation to ensure the data contained in a drive image has not been compromised?

• A) Follow the proper chain of custody procedures.
• B) Compare the image hash to the original hash.
• C) Ensure a legal hold has been placed on the image.
• D) Verify the time offset on the image file.

---

Definitions:

Trauma Stories

Narratives or accounts of traumatic experiences that individuals may share as part of their coping or healing process.

Cognitive Burnout

A mental state characterized by extreme mental fatigue, reduced motivation, and decreased performance, often resulting from prolonged stress or intellectual overwork.

Changed Worldview

A significant transformation in the fundamental perspective through which an individual perceives and interprets the world, often resulting from profound life experiences or revelations.

Vicarious Trauma

The emotional residue or impact that professionals experience from exposure to their clients' traumatic stories.