Computer Hacking Forensic Investigator (CHFI v10) — Question 442

If you plan to startup a suspect's computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect's hard drive by booting to the hard drive.

Answer options

• A. deltree command
• B. CMOS
• C. Boot.sys
• D. Scandisk utility

Correct answer: B

Explanation

The correct answer is B, CMOS, as it contains settings that control the boot sequence of the computer, allowing you to boot from an external device instead of the hard drive. The other options, such as the deltree command, Boot.sys, and Scandisk utility, do not directly relate to changing the boot process to protect the hard drive's data.