Question

Answer (Detailed Solution Below)

Option 3 : A forensic bridge explicitly rated for NVMe over USB-C with hardware write-blocking, followed by hash verification of the image

Detailed Solution

सही उत्तर A forensic bridge explicitly rated for NVMe over USB-C with hardware write-blocking, followed by hash verification of the image है।

Key Points

Helpful?

prepsnap.in • Part -A

Question:

A lab must acquire a suspect NVMe SSD using only a USB-C forensic workstation. Which acquisition setup is forensically sound? / लैब को सिर्फ USB-C फॉरेंसिक वर्कस्टेशन से संदिग्ध NVMe SSD का अधिग्रहण करना है। कौन-सा सेटअप फॉरेंसिक रूप से सही है?

Any consumer USB-to-NVMe enclosure, because USB protocol itself blocks writes

A software write blocker alone, because hardware blockers cannot handle NVMe

A forensic bridge explicitly rated for NVMe over USB-C with hardware write-blocking, followed by hash verification of the image

Direct SATA connection with a jumper set to read-only mode on the SSD

Correct Answer: A forensic bridge explicitly rated for NVMe over USB-C with hardware write-blocking, followed by hash verification of the image

Only a bridge designed for the NVMe protocol can enforce write-blocking at the command layer for that interface; consumer enclosures pass writes through, and hashing then proves the image's integrity. / NVMe प्रोटोकॉल के लिए डिज़ाइन किया ब्रिज ही कमांड स्तर पर राइट-ब्लॉकिंग लागू कर सकता है; साधारण एनक्लोज़र राइट्स पास कर देते हैं। Option (a) is the trap — USB does not block writes by itself.

Downloaded from PrepSnap (prepsnap.in)