Boris, a cybersecurity analyst, has just received a client's hard drive that needs a forensic analysis. He needs to ensure that the data on the drive maintains its integrity and that no unallocated blocks are changed so he can attempt to undelete files on the drive. Which of the following tools would be most useful as part of his analysis?
A) Multiport hub
B) Write blocker
C) Universal hard drive adapter kit
D) Tamper-evident tape

Question

Quizplus · Accepted Answer

A write blocker is specifically designed to allow read access to a hard drive without allowing any data on the drive to be modified, ensuring the integrity of the data for forensic analysis. This is crucial for undeleting files without altering unallocated blocks.

Boris, a Cybersecurity Analyst, Has Just Received a Client's Hard