Exam XK0-006 Topic 1 Question 44 Discussion

Actual exam question for CompTIA's XK0-006 exam
Question #: 44
Topic #: 1
A Linux administrator needs to analyze a compromised disk for traces of malware. To complete the analysis, the administrator wants to make an exact, block-level copy of the disk. Which of the following commands accomplishes this task?

Suggested Answer: B Vote an answer

The dd command performs a low-level, block-by-block copy of a device. Using if=/dev/sdc (input file) and of=/tmp/image (output file) with a block size (bs) ensures an exact replica of the disk, suitable for forensic analysis.

by Murphy at Jan 07, 2026, 05:41 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10