GIAC Exam GCFA Topic 1 Question 41 Discussion

Actual exam question for GIAC's GIAC Certified Forensics Analyst exam

Question #: 41
Topic #: 1

[All GIAC Certified Forensics Analyst Questions]

Which of the following tools works by using standard set of MS-DOS commands and can create an MD5 hash of an entire drive, partition, or selected files?

ADriveSpy

BOntrack

CForensic Sorter

DDevice Seizure

Show Suggested Answer

Suggested Answer: A

by Wilda at Apr 09, 2024, 10:30 PM

Limited Time Offer

25%

Off

Get Premium GCFA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sharika

2 days ago

I think the answer is C) Forensic Sorter.

upvoted 0 times

...

Dick

24 days ago

Ooh, good catch! DriveSpy does use those old-school MS-DOS commands, doesn't it? And I think it can do hashing too. Yeah, that's my guess.

upvoted 0 times

...

Pearline

26 days ago

Wait, wait, wait. Did anyone else notice that the question said 'standard MS-DOS commands'? That's gotta be a hint, right? I'm thinking it's probably DriveSpy.

upvoted 0 times

...

Jacki

27 days ago

Nah, I'm pretty sure Ontrack is more for data recovery, not forensics. Doesn't sound like it's the right tool for this question.

upvoted 0 times

...

Pete

28 days ago

I think the answer might be Ontrack. Isn't that the tool that can do forensic analysis on all kinds of storage devices?

upvoted 0 times

...

Winfred

1 months ago

I've used Device Seizure before, and it's a pretty powerful forensic tool. It can definitely create MD5 hashes, but I'm not sure about the whole 'standard MS-DOS commands' thing.

upvoted 0 times

...

Lynsey

1 months ago

This question seems pretty straightforward, but I'm not sure about the answer. Does anyone have any experience with these tools?

upvoted 0 times

...