The reason UNIX "dd" is considered a de facto standard for making bitstream copies is:
A) The majority of tools for examining digital evidence can interpret bitstream copies.
B) "dd" stands for "digital data" and was developed for making forensic copies.
C) "dd," although a UNIX tool, is universally able to traverse Windows file systems.
D) The developers of "dd" have made arrangements with other forensic software companies.

Question

Quizplus · Accepted Answer

"dd" is widely used in digital forensics because it creates bitstream copies, which are exact replicas of digital evidence. These copies can be analyzed by most forensic tools, making "dd" a de facto standard in the field.

The Reason UNIX "Dd" Is Considered a De Facto Standard