CompTIA CySA+ (CS0-001) — Question 36

Which of the following commands would a security analyst use to make a copy of an image for forensics use?

Answer options

• A. dd
• B. wget
• C. touch
• D. rm

Correct answer: A

Explanation

The correct answer is A, 'dd', which is a command-line utility used for converting and copying files, making it suitable for creating forensic copies of disk images. The other options, such as 'wget' (for downloading files), 'touch' (for changing file timestamps), and 'rm' (for removing files), do not serve the purpose of making copies for forensic analysis.