PrepSnap logoPrepSnap
Pass

Question

1.
2.
3.
4.
Answer (Detailed Solution Below)

Option 4 : A forensically sound bit-stream duplicate whose hash matches the original at acquisition

Advertisement

Detailed Solution

सही उत्तर A forensically sound bit-stream duplicate whose hash matches the original at acquisition है।

Key Points
Helpful?
PrepSnapprepsnap.in • Part -A

Question:

Under the best-evidence rule as applied to digital forensics, which of the following is admissible as the "original" evidence? / डिजिटल फॉरेंसिक पर लागू सर्वोत्तम-साक्ष्य नियम के तहत निम्न में से क्या "मूल" साक्ष्य के रूप में स्वीकार्य है?

1.
Only the physical suspect disk itself, never any copy
2.
Screenshots of the files taken during examination
3.
A printed paper listing of the directory contents
4.
A forensically sound bit-stream duplicate whose hash matches the original at acquisition

Correct Answer: A forensically sound bit-stream duplicate whose hash matches the original at acquisition

Courts treat a verified bit-for-bit duplicate as the original because the hash proves it is indistinguishable from the source; prints and screenshots are merely demonstrative. / सत्यापित बिट-दर-बिट डुप्लिकेट को न्यायालय मूल मानता है क्योंकि हैश स्रोत से अभिन्नता सिद्ध करता है। Option (a) is the trap — insisting on the physical disk ignores settled digital-evidence practice.

Downloaded from PrepSnap (prepsnap.in)