Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

EC-Council ECSS Exam - Topic 8 Question 125 Discussion

John, a forensic officer, was working on a criminal case. He employed imaging software to create a copy of data from the suspect device on a storage medium for further investigation. For developing an image of the original data, John used a software application that does not allow an unauthorized user to alter the image content on storage media, thereby retaining an unaltered image copy.Identify the data acquisition step performed by John in the above scenario.
D) Enabled write protection on the evidence media
A) Validated data acquisition
B) Planned for contingency
C) Sanitized the target media

EC-Council ECSS Exam - Topic 8 Question 125 Discussion

Actual exam question for EC-Council's ECSS exam
Question #: 125
Topic #: 8
[All ECSS Questions]

John, a forensic officer, was working on a criminal case. He employed imaging software to create a copy of data from the suspect device on a storage medium for further investigation. For developing an image of the original data, John used a software application that does not allow an unauthorized user to alter the image content on storage media, thereby retaining an unaltered image copy.

Identify the data acquisition step performed by John in the above scenario.

Show Suggested Answer Hide Answer
Suggested Answer: D

In digital forensics, write protection is a crucial step during data acquisition to ensure that the data being imaged cannot be altered during the process. This is essential to maintain the integrity of the evidence. John's use of imaging software that prevents unauthorized alteration indicates that he enabled write protection, which is a standard practice to safeguard the original data on storage media.


by Phuong at Aug 13, 2026, 05:24 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Vincenza
3 days ago
Nope, it's all about keeping that image intact!
upvoted 0 times
...
Vincent
8 days ago
I thought sanitizing was the main step here?
upvoted 0 times
...
Tiffiny
14 days ago
Wait, how does write protection work exactly?
upvoted 0 times
...
Lenora
19 days ago
Agreed, he had to ensure the evidence wasn't tampered with.
upvoted 0 times
...
Mabelle
24 days ago
That's definitely write protection!
upvoted 0 times
...
Marnie
29 days ago
I’m pretty confident that enabling write protection is the key step here. It’s crucial for maintaining the original data's integrity during acquisition.
upvoted 0 times
...
Annice
1 month ago
I feel like this question is tricky. Could it be validated data acquisition? That sounds familiar, but I’m leaning towards write protection.
upvoted 0 times
...
Paris
1 month ago
I remember a practice question about data acquisition where write protection was mentioned. It seems like the right choice here, but I'm not entirely sure.
upvoted 0 times
...
Jeannetta
1 month ago
I think the step John performed is related to ensuring the integrity of the data, so maybe it's about enabling write protection?
upvoted 0 times
...

Save Cancel