Question
A USB drive is seized. Which practice best protects the original evidence?
Select an option. Your answer will be checked instantly.
Correct Answer: A. Use a write blocker before imaging
Explanation:
A write blocker prevents accidental modification of the source media.
Leave a Reply