A forensic analyst needs to prove that data has not been tampered with since it was collected. Which of the following methods will the analyst MOST likely use?

Questions › Category: SY0-601 › A forensic analyst needs to prove that data has not been tampered with since it was collected. Which of the following methods will the analyst MOST likely use?

0 Vote Up Vote Down

Admin Staff asked 12 months ago

A forensic analyst needs to prove that data has not been tampered with since it was collected. Which of the following methods will the analyst MOST likely use?

A. Look for tampering on the evidence collection bag.

B. Encrypt the collected data using asymmetric encryption.

C. Ensure proper procedures for chain of custody are being followed.

D. Calculate the checksum using a hashing algorithm.





 

Correct Answer: D

This question is in SY0-601 exam
For getting CompTIA Security+ certificate