Dawn is performing a forensic analysis on an image acquired from a large hard drive. Some of the data has been corrupted, and it's also obvious that the user attempted to delete several files several weeks ago, which may or may not be intact. What should Dawn do to collect as many intact forensic artifacts from the drive image as possible?

🎲 Try a Random Question  |  Total Questions in Quiz: 17  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
CompTIA CySA+ Cybersecurity Analyst Certification Exam: Incident Response — practice the complete quiz, review flashcards, or try a random question.


Dawn is performing a forensic analysis on an image acquired from a large hard drive. Some of the data has been corrupted, and it's also obvious that the user attempted to delete several files several weeks ago, which may or may not be intact. What should Dawn do to collect as many intact forensic artifacts from the drive image as possible?