In the midst of a ransomware outbreak at a bustling healthcare provider in Seattle, forensic...

The correct answer is B because the scenario describes AI being used to rapidly process very large amounts of evidence, detect anomalies, and highlight suspicious patterns that investigators can act on immediately. That is the essence of automated data analysis. CHFI v11 explicitly includes integration of artificial intelligence with digital forensics, and the exam often frames AI in operational terms rather than theoretical ones. Here, the emphasis is on speed, scale, and the automated identification of relevant traces across massive datasets. Knowledge representation is more about structuring information so systems can reason over it. Reasoning process refers to inference and decision logic. Knowledge discovery is related, but it usually points more toward extracting broader hidden relationships or insights from data rather than the immediate automated triage and pattern flagging described in the incident response context. In a ransomware event with overwhelming evidence volume, the most directly applicable AI capability is automated data analysis because it reduces manual effort, prioritizes suspicious artifacts, and helps investigators convert raw evidence into a manageable set of forensic leads. That makes B the best CHFI-aligned answer.