Certified Incident Handler (ECIH v3) — Question 58

The Linux command used to make binary copies of computer media and as a disk imaging tool if given a raw disk device as its input is:

Answer options

• A. "dd" command
• B. "netstat" command
• C. "nslookup" command
• D. "find" command

Correct answer: A

Explanation

The 'dd' command is specifically designed for making low-level copies of data and creating disk images from raw disk devices. The 'netstat' command is used for network statistics and connections, 'nslookup' is for querying DNS, and 'find' is utilized for searching files, making them unsuitable for disk imaging tasks.