Question

which of the following tools have the ability to conduct a sector-by-sector duplicate of a hard drive to a larger hard drive? (choose all that apply.) a. encase b. ftk c. x-ways forensics d. autopsy

Explanation:

All listed digital forensics tools support sector-by-sector hard drive duplication to larger drives, a core function for preserving forensic data integrity.

Answer:

a. EnCase
b. FTK
c. X-Ways Forensics
d. Autopsy