Which command is the Best choice for creating a forensic backup of a Linux system?
A
Run form a bootable CD: tar cvzf image.tgz / B. Run from compromised operating system: tar cvzf image.tgz / C. Run from compromised operating system: dd if=/ dev/hda1 of=/mnt/backup/hda1.img
B
Run from a bootable CD: dd if=/dev/hda1 of=/mnt/backup/hda1.img