Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security

A forensic examiner computes a hash value of a seized pen drive at the time of seizure and again before producing it in court. The two hash values are identical. What does this establish?

Identical hash values show that the pen drive's contents were not altered between the two computations. Hashing verifies integrity because any change in data changes the digest. It does not prove who created the data or whether the seizure was lawful.

  1. AThe data on the pen drive is encrypted
  2. BThe contents have not been altered between the two points in timeCorrect
  3. CThe person who created the files is identified
  4. DThe pen drive was seized with a valid warrant

Explanation

A hash function produces a fixed digest that changes if even one bit of input changes. Matching digests show integrity of contents over time. They do not show authorship, encryption or legality of seizure.

Did you get it right without looking?

One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.

More Cyber Security questions