Question

a digital forensics examiner tasked with conducting a physical acquisition of a quantum fireball 1 gb scsi hdd has experienced repeated failures of the acquisition tool in their attempt to create a disk - to - image acquisition. which other method should the digital forensics examiner try to complete the physical acquisition process?
a. physical disk - to - image acquisition
b. physical disk - to - disk acquisition
c. logical disk - to - disk acquisition
d. logical disk - to - data acquisition

Explanation:

When physical disk-to-image acquisition fails for a physical forensic acquisition, the alternative physical acquisition method is disk-to-disk, which directly clones the source drive to a target drive and maintains the physical level of acquisition. Logical acquisition methods do not fulfill the requirement of physical acquisition.

Answer:

b. Physical disk-to-disk acquisition