Question
A USB drive is seized. Which practice best protects the original evidence?
Correct Answer: A
Use a write blocker before imaging
A write blocker prevents accidental modification of the source media.
A write blocker prevents accidental modification of the source media.
Leave a Reply