Question

which of the following are the caveats of the raw format when conducting acquisitions?
a. achieves lower drive speeds
b. requires equal or greater target disk space
c. contains hashes in the raw data file
d. collects marginal blocks

Explanation:

Raw format acquisition creates a bit-for-bit copy of the source drive, so it needs a target drive with space equal to or larger than the source. Option a is incorrect as raw acquisition typically has high drive speeds; option c is incorrect because hashes are not part of the raw data file itself (they are generated separately for verification); option d is incorrect as raw acquisition copies all blocks, not just marginal ones.

Answer:

b. Requires equal or greater target disk space