One way to compare your results and verify your new forensic tool is by using a ____, such as HexWorkshop, or WinHex.
A) disk imager
B) write-blocker
C) bit-stream copier
D) disk editor

Question

Quizplus · Accepted Answer

A disk editor, such as HexWorkshop or WinHex, allows you to view and modify the contents of a disk directly, which can be useful for validating the output of your forensic tool. Disk imaging tools, write-blockers, and bit-stream copiers may be used in the acquisition phase of forensic analysis, but they are not as relevant for verifying the results of a new tool.

One Way to Compare Your Results and Verify Your New