Chapter 03: Data Acquisition Exam
Questions and Answers with Verified
Solutions | Latest Updated 2026
If the computer has an encrypted False
drive, a live acquisition is done if
the
password or passphrase is not
available.
The most common and time- True
consuming technique for
preserving
evidence is creating a duplicate
copy of your disk-to-image file.
Some acquisition tools don't copy True
data in the host protected area
(HPA) of a disk drive.
Unlike RAID 0, RAID 3 stripes False
tracks
across all disks that make up one
volume.
, One major disadvantage of ____ Proprietary
format acquisitions is the inability
to
share an image between different
vendors' computer forensics
analysis
tools.
Typically, a(n) ____ acquisition is Static
done
on a computer seized during a
police raid, for example.
If the computer has an encrypted Live
drive, a ____ acquisition is done if
the
password or passphrase is
available.
The most common and flexible Disk-to-image file copy
data-
acquisition method is ____.
If your time is limited, consider Sparse
using
a logical acquisition or ____
acquisition
data copy method.
Image files can be reduced by as 50
much as ____% of the original
when
using lossless compression.
Questions and Answers with Verified
Solutions | Latest Updated 2026
If the computer has an encrypted False
drive, a live acquisition is done if
the
password or passphrase is not
available.
The most common and time- True
consuming technique for
preserving
evidence is creating a duplicate
copy of your disk-to-image file.
Some acquisition tools don't copy True
data in the host protected area
(HPA) of a disk drive.
Unlike RAID 0, RAID 3 stripes False
tracks
across all disks that make up one
volume.
, One major disadvantage of ____ Proprietary
format acquisitions is the inability
to
share an image between different
vendors' computer forensics
analysis
tools.
Typically, a(n) ____ acquisition is Static
done
on a computer seized during a
police raid, for example.
If the computer has an encrypted Live
drive, a ____ acquisition is done if
the
password or passphrase is
available.
The most common and flexible Disk-to-image file copy
data-
acquisition method is ____.
If your time is limited, consider Sparse
using
a logical acquisition or ____
acquisition
data copy method.
Image files can be reduced by as 50
much as ____% of the original
when
using lossless compression.
