Cisco Exam 200-201 Topic 2 Question 63 Discussion

Actual exam question for Cisco's 200-201 exam

Question #: 63
Topic #: 2

[All 200-201 Questions]

What are two differences between tampered disk images and untampered disk images'? (Choose two.)

ATampered Images are used in a security investigation process

BUntampered images can be used as law enforcement evidence.

CThe image is untampered if the existing stored hash matches the computed one

DThe image is tampered if the stored hash and the computed hash are identical

ETampered images are used as an element for the root cause analysis report

Show Suggested Answer

Suggested Answer: D

by Natalie at Jan 10, 2023, 06:35 AM

Limited Time Offer

25%

Off

Get Premium 200-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vallie

2 months ago

Wait, so if I spill coffee on my hard drive, is that considered a 'tampered image'? Because if so, I'm gonna need a lot of evidence bags.

upvoted 0 times

Yuki

23 days ago

No, spilling coffee on your hard drive would not be considered a tampered image.

upvoted 0 times

...

Taryn

29 days ago

C) The image is untampered if the existing stored hash matches the computed one

upvoted 0 times

...

Lai

1 months ago

A) Tampered Images are used in a security investigation process

upvoted 0 times

...

Bethanie

2 months ago

Okay, let me get this straight. Untampered images are good for evidence, but tampered images are for security investigations. And here I was thinking they were all just digital boo-boos.

upvoted 0 times

...

Kristel

2 months ago

Tampered images for root cause analysis? That's like using a broken hammer to fix a broken window. I'm not sure I'm following the logic here.

upvoted 0 times

Rikki

19 hours ago

D) The image is tampered if the stored hash and the computed hash are identical

upvoted 0 times

...

Kizzy

3 days ago

Untampered images can be used as law enforcement evidence.

upvoted 0 times

...

Caitlin

4 days ago

C) The image is untampered if the existing stored hash matches the computed one

upvoted 0 times

...

King

9 days ago

A) Tampered Images are used in a security investigation process

upvoted 0 times

...

Regenia

17 days ago

B) Untampered images can be used as law enforcement evidence.

upvoted 0 times

...

Bev

19 days ago

Tampered images are not ideal for root cause analysis.

upvoted 0 times

...

Owen

1 months ago

C) The image is untampered if the existing stored hash matches the computed one

upvoted 0 times

...

Vi

2 months ago

A) Tampered Images are used in a security investigation process

upvoted 0 times

...

Felton

2 months ago

Ah, the old hash conundrum. If the stored hash matches the computed one, it's untampered. But if they're identical, it's tampered? This question is a mind-bender!

upvoted 0 times

...

Jenise

2 months ago

Wait, so tampered images can be used in security investigations, but untampered images can be used as evidence? I think I need to re-read this a few times to make sure I've got it straight.

upvoted 0 times