According to NIST, which step in the digital forensics process involves drawing conclusions from data?
- reporting
- collection
- examination
- analysis
Explanation: NIST describes the digital forensics process as involving the following four steps:
Data collection: The identification of potential sources of forensic data and acquisition, handling, and storage of that data.
Examination: Assessing and extracting relevant information from the collected data. This may involve decompression or decryption of the data.
Analysis: Drawing conclusions from the data. Salient features, such as people, places, times, events, and so on, should be documented.
Reporting: Preparing and presenting information that resulted from the analysis. Reporting should be impartial and alternative explanations should be offered if appropriate.
Related exam: CCNA Cyber Ops Chapter 12 Exam Answers
Related exam: Checkpoint Exam: Analyzing Security Data Group Exam
