CompTIA Security+ (SY0-601) — Question 579

During a forensic investigation, an analyst uses software to create a checksum of the affected subject's email file. Which of the following is the analyst practicing?

Answer options

• A. Chain of custody
• B. Data recovery
• C. Non-repudiation
• D. Integrity

Correct answer: D

Explanation

The correct answer is D, Integrity, as creating a checksum helps ensure that the data has not been altered and maintains its original state. Chain of custody refers to the handling process of evidence, data recovery deals with retrieving lost data, and non-repudiation ensures that a party cannot deny the authenticity of their signature or message.