Which of the following supplies non-repudiation during a forensics investigation?
Correct Answer: C
Explanation
Using a SHA-2 signature of a drive image is a way to supply non-repudiation during a forensics investigation, as it can verify the integrity and authenticity of the data captured in the image. SHA-2 is a family of secure hash algorithms that can produce a unique and fixed-length digest of any input data. By hashing the drive image and comparing the signature with the original hash, the investigator can prove that the image has not been altered or tampered with since the time of acquisition. This can also help to identify the source of the data and prevent any denial from the suspect. References:
https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/managing-evidence/
https://www.skillsoft.com/course/comptia-security-incident-response-digital-forensics-supporting-investig