Eccouncil 212-82 Exam - Topic 9 Question 1 Discussion

Actual exam question for Eccouncil's 212-82 exam

Question #: 1
Topic #: 9

Ruben, a crime investigator, wants to retrieve all the deleted files and folders in the suspected media without affecting the original files. For this purpose, he uses a method that involves the creation of a cloned copy of the entire media and prevents the contamination of the original medi

Identify the method utilized by Ruben in the above scenario.

ASparse acquisition

BBit-stream imaging

CDrive decryption

DLogical acquisition

Show Suggested Answer

Suggested Answer: B

by Eden at Oct 27, 2022, 02:35 PM

Limited Time Offer

25%

Off

Get Premium 212-82 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Micaela

5 months ago

Logical acquisition wouldn't work for deleted files, so it's not that one.

upvoted 0 times

...

Ryan

5 months ago

Wait, can you really recover everything without touching the original? Sounds risky!

upvoted 0 times

...

Alonso

6 months ago

Bit-stream imaging is the best choice here, no doubt!

upvoted 0 times

...

Lizbeth

6 months ago

I thought sparse acquisition was the way to go for deleted files?

upvoted 0 times

...

Rolande

6 months ago

Definitely bit-stream imaging! That's the standard for forensics.

upvoted 0 times

...

Lucina

6 months ago

I’m a bit confused; I thought logical acquisition was also about retrieving files, but it doesn’t mention cloning the entire media like in this scenario.

upvoted 0 times

...

Brittney

6 months ago

This sounds a lot like the practice questions we did on digital forensics, and I feel like bit-stream imaging was the right answer there too.

upvoted 0 times

...

Roxane

6 months ago

I'm not entirely sure, but I remember something about sparse acquisition being used for specific files rather than the whole media.

upvoted 0 times

...

Sharita

6 months ago

I think the method Ruben used is bit-stream imaging since it involves creating a complete copy of the media without altering the original files.

upvoted 0 times

...

Burma

6 months ago

I'm pretty confident I know this one. The management plane DCN uses out-of-band communication, not in-band. And it connects to the NEs via the OSS/OBS interface, not directly.

upvoted 0 times

...

Hortencia

6 months ago

I'm a bit confused by this question. I don't recall learning about default importance values for dependent services' health scores in the course material. I'll have to make an educated guess on this one.

upvoted 0 times

...

Sabine

6 months ago

Hmm, I'm not entirely sure about this one. I think it has to do with how the loadbalancing algorithm uses the pool member information, but I'm not confident in the specifics. I'll need to review my notes on this topic.

upvoted 0 times

...