According to NIST, which step in the digital forensics process involves drawing conclusions from data?

According to NIST, which step in the digital forensics process involves drawing conclusions from data?

• reporting
• collection
• examination
• analysis

Explanation: NIST describes the digital forensics process as involving the following four steps:
Data collection: The identification of potential sources of forensic data and acquisition, handling, and storage of that data.
Examination: Assessing and extracting relevant information from the collected data. This may involve decompression or decryption of the data.
Analysis: Drawing conclusions from the data. Salient features, such as people, places, times, events, and so on, should be documented.
Reporting: Preparing and presenting information that resulted from the analysis. Reporting should be impartial and alternative explanations should be offered if appropriate.

Exam with this question: CCNA Cyber Ops Chapter 12 Exam Answers
Exam with this question: Checkpoint Exam: Analyzing Security Data Group Exam