CISA Certified Information Systems Auditor – Question3090

Which of the following is MOST important when creating a forensic image of a hard drive?

A.
Generating a content hash of the hard drive
B. Requiring an independent third-party be present while imaging
C. Securing a backup copy of the hard drive
D. Choosing an industry-leading forensics software tool

Correct Answer: A