2.7 Physical Security

Question 1

Forensic Drive Duplicator

Answer 1

copies a drive and validates that it matches the original drive but cannot be used by itself during analysis

Question 2

Hardware Write Blocker

Answer 2

primary purpose is to intercept and prevent (or ‘block’) any modifying command operation from ever reaching the storage device

Question 3

Degauser

Answer 3

wipe magnetic media, it would erase the hard drive contents ; involves demagnetizing a hard drive to erase its stored data. You cannot reuse a hard drive once it has been degaussed

Question 4

Wiping

Answer 4

wiping or clearing occurs by using a software tool to overwrite the data on a hard drive to destroy all electronic data on a hard disk or other media. Data wiping may be performed with a 1x, 7x, or 35x overwriting, with a higher number of times being more secure. This allows the hard drive to remain functional and allows for hardware reuse

Question 5

Purging

Answer 5

removing sensitive data from a hard drive using the device’s own electronics or an outside source (like a degausser). A purged device is generally not reusable

Question 6

Proximity Cards

Answer 6

contactless card that usually utilizes RFID to communicate with the reader on a physical access system. These are commonly used to access secured rooms (such as server rooms) or even a building itself (such as at a mantrap)