When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:

exams 312-49v9 312-49v9 exam 0 Comments

When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:
A . Automate Collection from image files
B . Avoiding copying data from the boot partition
C . Acquire data from host-protected area on a disk
D . Prevent Contamination to the evidence drive

Answer: D