mediumMultiple ChoiceObjective-mapped
SSCP Practice Question: In a forensic investigation, a hash of a suspect…
In a forensic investigation, a hash of a suspect file is computed. Which of the following is the primary purpose of hashing in this context?
⚠ Common exam trap
ISC2 often tests the misconception that hashing is used for encryption or compression, leading candidates to confuse its integrity-checking role with data transformation or security functions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To verify file integrity
In forensic investigations, hashing (using algorithms like SHA-256 or MD5) produces a unique fixed-size digest of the file's contents. The primary purpose is to verify file integrity by comparing the hash before and after analysis, ensuring the evidence has not been altered. This provides a cryptographic chain of custody, as any change to the file results in a completely different hash value.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To compress the file
Why it's wrong here
Hashing does not compress; it produces a fixed-size digest.
- ✗
To decrypt the file
Why it's wrong here
Hashing is a one-way function, not used for decryption.
- ✗
To identify the file owner
Why it's wrong here
Hashing does not provide ownership information.
- ✓
To verify file integrity
Why this is correct
Hashing creates a unique fingerprint to detect changes.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.