Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCED Exam - Topic 6 Question 71 Discussion

Which of the following is the best way to establish and verify the integrity of a file before copying it during an investigation?
D) Create hash of the file before and after copying the image verifying they are identical
A) Write down the file size of the file before and after copying and ensure they match
B) Ensure that the MAC times are identical before and after copying the file
C) Establish the chain of custody with the system description to prove it is the same image

GIAC GCED Exam - Topic 6 Question 71 Discussion

Actual exam question for GIAC's GCED exam
Question #: 71
Topic #: 6
[All GCED Questions]

Which of the following is the best way to establish and verify the integrity of a file before copying it during an investigation?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Tamar at Nov 19, 2025, 12:13 PM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Louvenia
5 months ago
D gives solid proof. Can't go wrong with hashes!
upvoted 0 times
...
Nickole
5 months ago
C is important, but not the best for integrity.
upvoted 0 times
...
Jettie
5 months ago
B is not enough. MAC times can be altered.
upvoted 0 times
...
Shantell
5 months ago
A is too simple. Size can change without issues.
upvoted 0 times
...
Franklyn
5 months ago
Agreed! Hash values ensure file integrity.
upvoted 0 times
...
Sharee
5 months ago
I think D is the best choice. Hashing is reliable.
upvoted 0 times
...
Alonzo
6 months ago
B is important, but it doesn't verify the file content like D does.
upvoted 0 times
...
Irma
6 months ago
Wait, can hashes really guarantee integrity? Seems too simple.
upvoted 0 times
...
Miles
6 months ago
C is crucial too, but D is more reliable for integrity.
upvoted 0 times
...
Antione
7 months ago
I think A is good enough, file sizes should match.
upvoted 0 times
...
Anabel
7 months ago
B) MAC times? What is this, a game of forensic hide-and-seek?
upvoted 0 times
...
Ivette
7 months ago
D) Hashing is the way to go. Anything else is just guesswork.
upvoted 0 times
...
Lonna
7 months ago
A) Write down the file size? Really? That's like trying to catch a thief by measuring the size of their shoes.
upvoted 0 times
...
Glory
7 months ago
D) Create hash of the file before and after copying the image verifying they are identical. This is the only way to truly verify the integrity of the file.
upvoted 0 times
...
Dannette
7 months ago
I practiced a question similar to this, and I think hashing is definitely the most reliable method. So, I’d go with D.
upvoted 0 times
...
Argelia
8 months ago
I feel like establishing a chain of custody is crucial, but I don't know if it directly verifies file integrity like option D does.
upvoted 0 times
...
Cecilia
8 months ago
I'm not entirely sure, but I remember something about MAC times being important too. Maybe option B could work?
upvoted 0 times
...
Tyisha
8 months ago
D) is definitely the way to go. Hashing the file is the most reliable method to confirm the integrity of the data during the investigation.
upvoted 0 times
...
Lemuel
8 months ago
I think option D is probably the best choice since creating a hash is a common method to verify file integrity.
upvoted 0 times
...
Jesse
8 months ago
D is definitely the best option, hashes are key!
upvoted 0 times
...
Jerry
9 months ago
D) Hashing is the gold standard for file integrity. Anything else is just playing around.
upvoted 0 times
...
Effie
9 months ago
Option D is the clear winner here. Verifying the hash before and after the copy is the surest way to establish that the file has not been altered.
upvoted 0 times
...
Bette
9 months ago
I'm a bit confused on this one. I'm not sure if option A or D is the better approach. I'll have to think it through carefully.
upvoted 0 times
...
Lenna
9 months ago
D) seems like the best option to verify the integrity of the file. Creating a hash before and after copying will ensure the file hasn't been tampered with.
upvoted 0 times
Ernie
4 months ago
D) gives the best assurance against tampering.
upvoted 0 times
...
Luis
4 months ago
Can't argue with that! Hashes are the way to go.
upvoted 0 times
...
Aleta
4 months ago
A) and B) are okay, but D) is the gold standard.
upvoted 0 times
...
Gladis
4 months ago
Hashing is crucial for file integrity!
upvoted 0 times
...
Corrie
8 months ago
I agree, D) is definitely the most reliable method.
upvoted 0 times
...
...

Save Cancel