Question
A suspect claims they never visited a site, but browser history and cache show activity. What should the examiner do?
Select an option. Your answer will be checked instantly.
Correct Answer: A. Correlate artifacts and report findings objectively
Explanation:
Forensic conclusions should rely on correlated evidence and objective reporting.
Leave a Reply