To create an exact image of an evidence disk, copying the ____ to a target work disk that's identical to the evidence disk is preferable.
A) removable copy
B) backup copy
C) bit-stream image
D) backup image

Question

Quizplus · Accepted Answer

A bit-stream image creates an exact copy of each sector on the evidence disk, including unallocated space and deleted files. This image can then be copied to a target work disk that is identical to the evidence disk, allowing for a complete analysis of the evidence while preserving the original data. Removable and backup copies may not capture all of the necessary information, and a backup image may back up only selected files rather than creating an exact copy of the disk.

To Create an Exact Image of an Evidence Disk, Copying