A security administrator needs to image a large hard drive for forensic analysis. Which of the
following will allow for faster imaging to a second hard drive?
A.
cp /dev/sda /dev/sdb bs=8k
B.
tail -f /dev/sda > /dev/sdb bs=8k
C.
dd in=/dev/sda out=/dev/sdb bs=4k
D.
locate /dev/sda /dev/sdb bs=4k