CompTIA Security+ (SY0-601) — Question 162

Which of the following BEST helps to demonstrate integrity during a forensic investigation?

Answer options

• A. Event logs
• B. Encryption
• C. Hashing
• D. Snapshots

Correct answer: C

Explanation

Hashing is the best method to demonstrate integrity because it creates a unique fingerprint of data that can be used to verify that the data has not been altered. While event logs can provide context, encryption protects data confidentiality, and snapshots capture the state of a system, none of these methods offer the same level of assurance for data integrity as hashing does.