EC-Council
312-49V9 · Question #467
When using Windows acquisitions tools to acquire digital evidence, it is important to use a well- tested hardware write-blocking device to _________
The correct answer is D. Prevent contamination to the evidence drive. See the full explanation below for the reasoning.
Question
When using Windows acquisitions tools to acquire digital evidence, it is important to use a well- tested hardware write-blocking device to _________
Options
- AAutomate collection from image files
- BAvoiding copying data from the boot partition
- CAcquire data from the host-protected area on a disk
- DPrevent contamination to the evidence drive
How the community answered
(34 responses)- A15% (5)
- B6% (2)
- C6% (2)
- D74% (25)
Community Discussion
No community discussion yet for this question.