Option D is the best answer because the scenario describes using tools to automate repetitive, high-volume forensic tasks such as bit-by-bit imaging , hash comparison , and timeline generation so the investigator can concentrate on interpretation and deeper analysis. CHFI v11 explicitly includes Forensics Automation and Orchestration as a core topic.
The key clue is that the tools are being used to streamline repeated technical tasks efficiently across a large dataset. That is the hallmark of forensic automation . Automation reduces manual workload in predictable processes like hashing, imaging, and log parsing. Orchestration , by contrast, usually refers to coordinating multiple tools, workflows, or systems together across a broader process. While there may be some orchestration elements in real environments, the emphasis in this question is clearly on efficient execution of repetitive tasks.
Because the investigator is using computerized tools to handle recurring evidence-processing steps at scale, the most accurate classification is forensic automation performing repetitive tasks efficiently . That aligns directly with the CHFI objective covering automation and orchestration in digital forensics.