Computer Hacking Forensic Investigator (CHFI v10) — Question 236

Which of the following is NOT a physical evidence?

Answer options

• A. Removable media
• B. Cables
• C. Image file on a hard disk
• D. Publications

Correct answer: C

Explanation

An image file on a hard disk is a digital representation and does not constitute physical evidence, which is tangible and can be physically handled. In contrast, removable media, cables, and publications are all physical items that can be interacted with directly.