Which of the following tool creates a bit-by-bit image of an evidence media?

What will the following command accomplish in Linux?
fdisk /dev/hda

Checkpoint Firewall logs can be viewed through a Check Point Log viewer that uses icons and colors in the log table to represent different security events and their severity.
What does the icon in the checkpoint logs represent?

What method of copying should always be performed first before carrying out an investigation?

Task list command displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer. Which of the following task list commands provides information about the listed processes, including the image name, PID, name, and number of the session for the process?