Which of the following methods is used by forensic investigators to acquire an image over the network in a secure manner?

A DOS boot disk is used for local standalone forensic booting and does not provide network-based acquisition or any secure authentication mechanism.

A Linux Live CD is used to locally boot a suspect machine for offline acquisition and does not natively support remote network-based forensic imaging.

SAFE is a server-based component of the EnCase forensic platform that uses public key authentication and encrypted communication channels to allow examiners to remotely acquire forensic images from networked machines in a secure and forensically sound manner, making it the correct tool for network-based acquisition.

EnCase with a hardware write blocker is a local physical acquisition setup where the write blocker prevents drive modification, but it cannot perform remote acquisition over a network.