ACFE Exam CFE-Investigation Topic 2 Question 84 Discussion

Actual exam question for ACFE's CFE-Investigation exam

Question #: 84
Topic #: 2

Which of the following is the MOST ACCURATE statement about imaging suspect computers' hard drives?

AImaging enables the retrieval of data from the suspect computer directly via its operating system.

BImaging prohibits access to the suspect computer's hard drive by individuals not professionally trained in forensic analysis

CImaging creates pictures of the suspect computer system and its wires and cables

DImaging allows for the analysis of data from a suspect computer without altering or damaging the original data in any way

Show Suggested Answer

Suggested Answer: B

by Catarina at Apr 24, 2024, 04:50 AM

Limited Time Offer

25%

Off

Get Premium CFE-Investigation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Diego

1 months ago

I'm surprised option D isn't more obvious. Imaging is all about preserving the integrity of the evidence, which is the whole point of digital forensics.

upvoted 0 times

Karan

12 days ago

B) Imaging prohibits access to the suspect computer's hard drive by individuals not professionally trained in forensic analysis

upvoted 0 times

...

Rhea

20 days ago

A) Imaging enables the retrieval of data from the suspect computer directly via its operating system.

upvoted 0 times

...

Shantay

1 months ago

Haha, option A sounds like something out of a 90s hacker movie. Imaging doesn't retrieve data directly from the OS, it creates an exact copy of the entire drive.

upvoted 0 times

...

Arlette

1 months ago

Wow, option C is completely off the mark. Imaging is about creating a bit-for-bit copy of the hard drive, not taking pictures of the computer itself!

upvoted 0 times

...

Suzi

2 months ago

I'm not sure, but I think it's either A or D.

upvoted 0 times

...

Pauline

2 months ago

I think option B is the best choice. Imaging protects the hard drive from unauthorized access, ensuring only trained professionals can analyze the data.

upvoted 0 times

Edna

27 days ago

Imaging is essential for preserving the original data on the suspect computer's hard drive.

upvoted 0 times

...

Lennie

30 days ago

I agree, option B is crucial for maintaining the integrity of the evidence.

upvoted 0 times

...

Rene

2 months ago

I agree with Fatima, imaging allows for analysis without altering the original data.

upvoted 0 times

...

Nguyet

2 months ago

Option D is the correct answer. Imaging allows for a forensic analysis without altering the original data, which is crucial for maintaining the integrity of the evidence.

upvoted 0 times

...

Fatima

2 months ago

I think the answer is D.

upvoted 0 times

...