CertNexus Certified Cyber Secure Coder (CSC) — Question 1

After imaging a disk as part of an investigation, a forensics analyst wants to hash the image using a tool that supports piecewise hashing. Which of the following tools should the analyst use?

Answer options

• A. md5sum
• B. sha256sum
• C. md5deep
• D. hashdeep

Correct answer: A

Explanation

The correct answer is A, md5sum, which is designed to compute MD5 hashes and can support piecewise hashing. Options B and C, sha256sum and md5deep, respectively, do not provide the same functionality as piecewise hashing, while D, hashdeep, is used for hashing multiple files but is not specifically indicated for piecewise operations in this context.