ACFE Exam CFE-Investigation Topic 2 Question 84 Discussion

Actual exam question for ACFE's CFE-Investigation exam

Question #: 84
Topic #: 2

Which of the following is the MOST ACCURATE statement about imaging suspect computers' hard drives?

AImaging enables the retrieval of data from the suspect computer directly via its operating system.

BImaging prohibits access to the suspect computer's hard drive by individuals not professionally trained in forensic analysis

CImaging creates pictures of the suspect computer system and its wires and cables

DImaging allows for the analysis of data from a suspect computer without altering or damaging the original data in any way

Show Suggested Answer

Suggested Answer: B

by Catarina at Apr 24, 2024, 04:50 AM

Limited Time Offer

25%

Off

Get Premium CFE-Investigation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Diego

10 days ago

I'm surprised option D isn't more obvious. Imaging is all about preserving the integrity of the evidence, which is the whole point of digital forensics.

upvoted 0 times

...

Shantay

11 days ago

Haha, option A sounds like something out of a 90s hacker movie. Imaging doesn't retrieve data directly from the OS, it creates an exact copy of the entire drive.

upvoted 0 times

...

Arlette

12 days ago

Wow, option C is completely off the mark. Imaging is about creating a bit-for-bit copy of the hard drive, not taking pictures of the computer itself!

upvoted 0 times

...

Suzi

23 days ago

I'm not sure, but I think it's either A or D.

upvoted 0 times

...

Pauline

23 days ago

I think option B is the best choice. Imaging protects the hard drive from unauthorized access, ensuring only trained professionals can analyze the data.

upvoted 0 times

Edna

4 days ago

Imaging is essential for preserving the original data on the suspect computer's hard drive.

upvoted 0 times

...

Lennie

7 days ago

I agree, option B is crucial for maintaining the integrity of the evidence.

upvoted 0 times

...

Rene

25 days ago

I agree with Fatima, imaging allows for analysis without altering the original data.

upvoted 0 times

...

Nguyet

26 days ago

Option D is the correct answer. Imaging allows for a forensic analysis without altering the original data, which is crucial for maintaining the integrity of the evidence.

upvoted 0 times

...

Fatima

1 months ago

I think the answer is D.

upvoted 0 times

...