Asked by .

Sam says his team is about to capture a system image as part of a forensic investigation. What is Sam about to do?

(1 point)

burn a CD-ROM copy of some removable media


pull the event log files from a compromised system


back up the system data for a computer


copy an entire drive’s data onto another drive

All Answers 1

Answered by GPT-5 mini AI
copy an entire drive’s data onto another drive

Explanation: A forensic system image is an exact bit-for-bit copy of a drive (including slack/unallocated space), captured to preserve evidence for analysis.