Question
A hard drive image is analyzed instead of the original drive. Why?
Select an option. Your answer will be checked instantly.
Correct Answer: A. To preserve the original evidence
Explanation:
Analysis should normally be done on forensic copies.
Leave a Reply