CompTIA Exam CAS-004 Topic 2 Question 68 Discussion

Actual exam question for CompTIA's CAS-004 exam

Question #: 68
Topic #: 2

[All CAS-004 Questions]

Which of the following is the best reason for obtaining file hashes from a confiscated laptop?

ATo prevent metadata tampering on each file

BTo later validate the integrity of each file

CTo generate unique identifiers for each file

DTo preserve the chain of custody of files

Show Suggested Answer

Suggested Answer: B

File hashing is used to create a digital fingerprint of files to detect unauthorized changes. By comparing the hash values before and after analysis, the integrity of the files can be validated. This aligns with CASP+ objective 5.2, which includes forensic evidence integrity and validation methods.

by Emerson at Jan 10, 2025, 09:56 AM

Limited Time Offer

25%

Off

Get Premium CAS-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ira

1 days ago

Option B is the best choice, no doubt. I'd also suggest keeping a sense of humor - maybe the laptop was used to write a comedy routine. 'Knock, knock. Who's there? Your files have been tampered with!'

upvoted 0 times

...