Which of the following are legally compliant forensics applications that will detect an alternative data stream (ADS) or a file with an incorrect file extension? (Choose two.)
B. EnCase and D. Forensic Toolkit (FTK).
Both EnCase and Forensic Toolkit (FTK) are widely used, legally compliant forensic applications that can detect alternative data streams (ADS) and analyze files with incorrect file extensions as part of digital forensics investigations.
Here’s a quick look at why the other options aren’t as suitable:
A. Disk duplicator: Used to create exact copies of storage media but does not analyze or detect ADS or file extensions.
C. dd: A command-line tool used to create disk images, but it doesn’t analyze files for ADS or incorrect file extensions on its own.
E. Write blocker: A hardware or software tool that prevents modification of data during forensic imaging but doesn’t analyze or detect ADS or file extensions.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
044f354
1 month, 3 weeks ago