Question
A forensic examiner changes file access times by opening originals. What principle is violated?
Select an option. Your answer will be checked instantly.
Correct Answer: A. Evidence preservation
Explanation:
Opening originals can alter metadata and harm preservation.
Leave a Reply