Discussion
Which of the following are formats (extension) of forensic images of hard drives ?
(a) EO1
(b) AD1
(c) OO1
(d) FI1
Choose the correct answer from the options given below :
Answer: A
The forensic image formats are (a), (b) and (c) only.
- E01 (printed EO1) is the EnCase Evidence File format, the most widely used compressed image format with built-in hashes.
- AD1 is AccessData's custom content (logical) image format from FTK Imager.
- 001 (printed OO1) is the extension of the first segment of a split raw (dd) image.
FI1 is not an extension used for forensic images, so every option including (d) is wrong.
No comment is present. Be the first to comment.
Loading…
Post your comment
Please log in or register to post a comment.
Examination Categories
- SSC Exams
- Banking Exams
- Teaching Exams
- Civil Services Exams
- Railways Exams
- Engineering Recruitment Exams
- Defence Exams
- State Government Exams
- Police Exams
- Insurance Exams
- Nursing Exams
- Other Government Exams
- NRA CET
- PG Entrance Exams
- Campus Placement
- MBA Entrance Exams
- CUET and UG Entrance
- Judiciary Exams
- Regulatory Body Exams
- Software Development