Guidance_Software
GD0-110 · Question #157
When handling computer evidence, an investigator should:
The correct answer is A. Avoid making any changes to the original evidence. See the full explanation below for the reasoning.
Question
When handling computer evidence, an investigator should:
Options
- AAvoid making any changes to the original evidence.
- BMake any changes to the evidence that will further the investigation.
- CBoth a and b
- DNeither a or b
How the community answered
(48 responses)- A77% (37)
- B15% (7)
- C6% (3)
- D2% (1)
Community Discussion
No community discussion yet for this question.