Question $8($Mandatory$)(1$ point$)$

One concern of Live Acquisitions is

$($CLO $5,$ MLO $4$C$)$

a$)$ Volatile data is lost during live acquisitions

b$)$ Live devices are known to crash during live acquisitions

c$)$ Examiners do not have the technology to acquire live data

d$)$ Interactions with the device may cause unintentional writes

Question $9($Mandatory$)(1$ point$)$

A Hash function's purpose in forensics is to

$($CLO $5,$ MLO$4$ D$)$

a$)$ Get the digital fingerprint of a file

b$)$ Corrects forensic examiner's error

c$)$ Retrieve bits found in slack space

d$)$ Reconstruct overwritten files

Question $10($Mandatory$)(1$ point$)$

Which of the following is NOT a characteristics of hash function H$?($CLO $5,$ MLO $4$D$)$

a$)$ The function accepts any$-$size message $M$

b$)H(M)$ should be relatively easy to compute

c$)$ Produces a variable length output

d$)$ Computationally infeasible to find $yx$ such that $H(y)=H(x)$