New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISM Exam - Topic 3 Question 105 Discussion

Actual exam question for Isaca's CISM exam
Question #: 105
Topic #: 3
[All CISM Questions]

An incident handler is preparing a forensic image of a hard drive. Which of the following MUST be done to provide evidence that the image is an exact copy of the original?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Barney at Nov 24, 2025, 06:54 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Noel
9 hours ago
Wait, do we really need to use the same hardware? Seems odd.
upvoted 0 times
...
Claudio
6 days ago
Totally agree with D! Can't skip hashing.
upvoted 0 times
...
Candra
11 days ago
Hashing? More like "smashing" it out of the park with that answer! D is the way to go.
upvoted 0 times
...
Donette
16 days ago
D) Hashing is the way to hash it out. No other option can guarantee the image is a true copy.
upvoted 0 times
...
Artie
21 days ago
D) Gotta love that digital hashing! It's the only surefire method to prove the image is legit.
upvoted 0 times
...
Barb
26 days ago
D) Definitely. Hashing is the way to go to verify the integrity of the forensic image.
upvoted 0 times
...
Kenny
1 month ago
I feel like using the same hardware might not be necessary, but I can’t recall the exact reasoning behind it.
upvoted 0 times
...
Lacey
1 month ago
I practiced a similar question where hashing was the key step. It seems like the best way to ensure integrity.
upvoted 0 times
...
Ciara
1 month ago
I’m not completely sure, but I remember something about verifying file counts being less reliable than hashing.
upvoted 0 times
...
Raina
2 months ago
I think digital hashing is crucial for proving the image is an exact copy, right? It’s like a fingerprint for the data.
upvoted 0 times
...
Truman
2 months ago
Verifying file counts manually? That doesn't sound very efficient or reliable. Digital hashing is definitely the way to go to validate the forensic copy.
upvoted 0 times
...
Ulysses
2 months ago
Using the same hardware seems like it could be important, but I'm not sure if that's an absolute requirement. The hashing is definitely the key piece to provide evidence of the forensic image.
upvoted 0 times
...
Carrol
2 months ago
I thought A was enough. Manual checks seem solid too.
upvoted 0 times
...
Ashlyn
2 months ago
Okay, I'm pretty confident that D is the right answer. Hashing the original and the image will give you a checksum to compare and prove they're identical.
upvoted 0 times
...
Lon
2 months ago
D) Perform digital hashing of the original and the image. This is the only way to ensure the forensic image is an exact copy.
upvoted 0 times
...
Corinne
3 months ago
D is the right answer! Hashing is crucial.
upvoted 0 times
...
Makeda
3 months ago
I'm a bit confused - is encrypting and backing up the drive before copying really necessary? Seems like extra steps that aren't directly related to verifying the image.
upvoted 0 times
...
Gregg
3 months ago
Hmm, I think the key here is performing digital hashing to verify the image. That's the only way to ensure the copy is an exact match.
upvoted 0 times
Mitsue
3 months ago
I agree, digital hashing is crucial for verification.
upvoted 0 times
...
...

Save Cancel