Forensic investigators use ____ (also known as sector-by-sector) copying when making a forensic image of a device.
A) sector-stream
B) sector
C) byte-stream
D) bit-stream

Question

Quizplus · Accepted Answer

Forensic investigators use bit-stream copying, also known as sector-by-sector copying, when making a forensic image of a device to ensure an exact replica of the storage medium is created, capturing all data including deleted files and slack space.

Forensic Investigators Use ____ (Also Known as Sector-By-Sector) Copying When