Question
A forensic examiner changes file access times by opening originals. What principle is violated?
Correct Answer: A
Evidence preservation
Opening originals can alter metadata and harm preservation.
Opening originals can alter metadata and harm preservation.
Leave a Reply