Guidance_Software
GD0-100 · Question #157
When handling computer evidence, an investigator should:
The correct answer is A. Avoid making any changes to the original evidence. See the full explanation below for the reasoning.
Question
When handling computer evidence, an investigator should:
Options
- AAvoid making any changes to the original evidence.
- BMake any changes to the evidence that will further the investigation.
- CBoth a and b
- DNeither a or b
How the community answered
(39 responses)- A74% (29)
- B15% (6)
- C3% (1)
- D8% (3)
Community Discussion
No community discussion yet for this question.