Bird
0
0

Consider this scenario: A forensic investigator copies data from a suspect's computer using a write-blocker device. What is the main reason for using a write-blocker?

medium📝 Analysis Q13 of 15
Cybersecurity - Digital Forensics
Consider this scenario: A forensic investigator copies data from a suspect's computer using a write-blocker device. What is the main reason for using a write-blocker?
ATo speed up the copying process
BTo encrypt the copied data for security
CTo prevent any changes to the original data during copying
DTo delete unnecessary files automatically
Step-by-Step Solution
Solution:
  1. Step 1: Understand the function of a write-blocker

    A write-blocker stops any write commands to the original device.
  2. Step 2: Recognize why preventing changes is critical

    It keeps the original evidence unchanged and admissible in court.
  3. Final Answer:

    To prevent any changes to the original data during copying -> Option C
  4. Quick Check:

    Write-blocker = No changes to original data [OK]
Quick Trick: Write-blockers stop changes to original evidence [OK]
Common Mistakes:
MISTAKES
  • Thinking write-blockers speed up copying
  • Believing they delete files
  • Confusing with encryption tools

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes