Computer Hacking Forensic Investigator (CHFI v10) — Question 582

The MD5 program is used to:

Answer options

• A. wipe magnetic media before recycling it
• B. make directories on an evidence disk
• C. view graphics files on an evidence drive
• D. verify that a disk is not altered when you examine it

Correct answer: D

Explanation

The MD5 program is utilized to generate a hash value that helps verify the integrity of data, ensuring that the disk has not been altered during examination, which is why option D is correct. Options A, B, and C do not accurately describe the function of the MD5 program, as it is not related to media wiping, directory creation, or viewing graphics files.