When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:

When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:
A . Automate Collection from image files
B . Avoiding copying data from the boot partition
C . Acquire data from host-protected area on a disk
D . Prevent Contamination to the evidence drive

View Answer

Answer: D