CompTIA SecurityX (CAS-005) — Question 46

Which of the following is the best reason for obtaining file hashes from a confiscated laptop?

Answer options

• A. To prevent metadata tampering on each file
• B. To later validate the integrity of each file
• C. To generate unique identifiers for each file
• D. To preserve the chain of custody of files

Correct answer: B

Explanation

The correct answer is B because obtaining file hashes allows for future verification of the files' integrity, ensuring they have not been altered. While A, C, and D are relevant considerations, they do not directly relate to the primary purpose of using hashes for integrity validation.