Question
Which option best describes the purpose of file carving in a forensic investigation?
Select an option. Your answer will be checked instantly.
Correct Answer: A. To support signature-based recovery during an investigation.
Explanation:
The purpose of file carving is connected with signature-based recovery, not with altering or avoiding evidence procedures.
Leave a Reply