An investigator finds a USB drive at a crime scene and wants to present it as evidence in court. The investigator takes the USB drive and creates a forensic image of it and takes a hash of both the original USB device and the image that was created. What is the investigator attempting to prove about the USB drive when the evidence is submitted in court?

An investigator finds a USB drive at a crime scene and wants to present it as evidence in court. The investigator takes the USB drive and creates a forensic image of it and takes a hash of both the original USB device and the image that was created. What is the investigator attempting to prove about the USB drive when the evidence is submitted in court?

• The investigator found a USB drive and was able to make a copy of it.
• An exact copy cannot be made of a device.
• The data is all there.
• The data in the image is an exact copy and nothing has been altered by the process.

Explanation: A hash function ensures the integrity of a program, file, or device.

Exam with this question: Cybersecurity Essentials Chapter 5 Quiz Answers
Exam with this question: Network Defense 8.8.2 Module 8: Public Key Cryptography Quiz
Exam with this question: Network Defense (NetDef) Course Final Exam Answers