Which of the following is an anti-forensics technique?

• A. Encrypting data at rest with strong keys.
• B. Regular system backups to improve recovery time.
• C. Implementing MFA to protect accounts.
• D. Data wiping that destroys data before it can be recovered.

Answer: (D)

Anti-forensics is about actions that hinder forensic investigations by erasing, concealing, or making evidence unrecoverable. Data wiping that destroys data before it can be recovered is a clear anti-forensics technique because it directly eliminates usable traces and prevents investigators from reconstructing events. The other practices are standard security and operational controls: encrypting data at rest protects confidentiality but isn’t intended to thwart investigations, regular backups support evidence preservation and recovery, and multi-factor authentication strengthens access controls. These do not aim to defeat forensic analysis in the way that wiping data does.