When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:

When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:
A . Automate Collection from image files
B. Avoiding copying data from the boot partition
C. Acquire data from host-protected area on a disk
D. Prevent Contamination to the evidence drive

View Answer

Answer: D