ECDFP Practice Questions - Certified Digital Forensics Professional (eCDFP) Exam

Access More Questions

FTK Imager is used to create a forensic image of a suspect drive. Which image format preserves metadata, allows compression, and is natively segmented, making it the de-facto standard?

E01 (Expert Witness Format) dd (raw) AFF (Advanced Forensic Format) ISO 9660

Correct Answer:

E01 (Expert Witness Format)

Access more questions from this quiz

Continue to eCDFP Practice Questions - Certified Digital Forensics Professional (eCDFP) Exam for more practice questions and the full quiz experience.

Access More Questions