When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:

exams 312-49v10 V1 312-49v10 exam 0 Comments

When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:
A . Automate Collection from image files
B. Avoiding copying data from the boot partition
C. Acquire data from host-protected area on a disk
D. Prevent Contamination to the evidence drive

Answer: D