Quiz — Acquisition
10 APPLY items on imaging, hashing, and write blockers on $DFIR_LAB.
Acquisition Literacy — Module Quiz
Ten APPLY items. Name acquisition habits on YOUR $DFIR_LAB — never stranger-hardware imaging, hash mismatch ignores, or write-enabled source mounts. Original Cyberlium. Next: Disk and Filesystem.
APPLY: Imaging literacy helps by:
APPLY: True or False: SHA-256 verification detects accidental image corruption.
APPLY: Write blockers primarily protect:
APPLY: Tutorial dd's a stranger laptop — you:
APPLY: Physical imaging includes:
APPLY: Hash mismatch should trigger:
APPLY: Cyberlium NEVER allows:
APPLY: True or False: Read-only mounts support software-side protection for image files.
APPLY: chmod 600 on acquisition notes means:
APPLY: Next module after this quiz: