MENU
In which step of the computer forensics investigation methodology would you run MD5 checksum on the evidence?
Suggested Answer: B
Get Premium CFA-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
PA
Pamella
11 months ago
Nope, it’s definitely not in the search warrant phase.
BR
Brandee
11 months ago
Surprised to see people confused about this!
MA
Maryanne
11 months ago
I thought it was part of collecting the evidence?
DE
Delisa
12 months ago
Totally agree, that's when you check the integrity.
MI
Mira
12 months ago
It’s during the "Acquire the data" step!
NA
Naomi
12 months ago
I thought checksums were more about securing the data, but now I'm confused if that’s part of the acquisition step instead.
LA
Lashandra
1 year ago
I practiced a similar question, and I feel like it was related to collecting the evidence, so maybe it's step C?
XU
Xuan
1 year ago
I’m not entirely sure, but I remember something about checksums being used after collecting evidence to verify integrity.
JU
Julio
1 year ago
I think running the MD5 checksum is part of the data acquisition process, so it might be in step D.
HE
Helene
1 year ago
Ah, I remember learning about this in class. The MD5 checksum is used to ensure the evidence hasn't been tampered with, so it would be done during the "Collect the evidence" step.
FR
Francene
1 year ago
The MD5 checksum is all about verifying the integrity of the evidence, so I'd say it's most likely in the "Acquire the data" step.
KI
Kiera
1 year ago
Hmm, I'm a bit unsure about this one. I think it might be in the "Collect the evidence" step, but I'm not 100% certain.
DA
Danilo
1 year ago
I'm pretty sure this would be done during the "Acquire the data" step, since that's when you're actually collecting the evidence and need to verify its integrity.
HO
Hoa
1 year ago
I'm confident the MD5 checksum is part of the "Acquire the data" step, as that's when you're actually capturing the evidence and need to make sure it's authentic.
LU
Lucina
1 year ago
Hmm, this looks like a tricky one. I'll need to carefully analyze the SQL statement and the table structures to figure out the right answer.
JE
Jerry
1 year ago
I bet the forensic team uses a checksum calculator called 'MD5 Hammer' to really drive the point home.
LA
Lauran
1 year ago
C) Collect the evidence
RO
Rosio
1 year ago
B) Evaluate and secure the scene
JE
Jerry
1 year ago
A) Obtain search warrant
KA
Kallie
2 years ago
D) Acquire the data, definitely. Checksum that evidence like your life depends on it!
NI
Nicolette
1 year ago
D) Acquire the data. MD5 checksum is a key step in ensuring the evidence is not tampered with.
JU
Juliann
1 year ago
B) Evaluate and secure the scene first. Then move on to running MD5 checksum.
RE
Rebecka
1 year ago
C) Collect the evidence. MD5 checksum is crucial for data integrity.
DA
Dalene
1 year ago
D) Acquire the data, definitely. Checksum that evidence like your life depends on it!
LE
Leigha
2 years ago
Hmm, I'm going with B) Evaluate and secure the scene. Gotta make sure the crime scene is safe before doing anything else!
SE
Serita
1 year ago
Once the scene is secure, we can move on to collecting the evidence.
OL
Ollie
1 year ago
I agree, securing the scene is crucial before proceeding with anything else.
LO
Long
2 years ago
I think C) Collect the evidence is the right answer. You need to verify the evidence before collecting it, right?
SH
Shelton
2 years ago
I'm not sure, but I think it could also be done in the Collect the evidence step to verify the integrity of the evidence before moving on.
NA
Nana
2 years ago
I agree with Trinidad, MD5 checksum is used to ensure data integrity, so it makes sense to do it when acquiring the data.
DE
Dexter
2 years ago
D) Acquire the data seems to be the correct answer here. Running the MD5 checksum is part of the data acquisition process to ensure the integrity of the evidence.
AL
Allene
1 year ago
It's a crucial step in maintaining the chain of custody in computer forensics investigations.
ER
Ernie
1 year ago
MD5 checksum helps ensure that the data has not been altered during acquisition.
GO
Goldie
1 year ago
Yes, that's right. It's important to verify the integrity of the evidence.
TR
Trina
1 year ago
D) Acquire the data seems to be the correct answer here.
TR
Trinidad
2 years ago
I think you would run MD5 checksum in the Acquire the data step.