Exit EC1-349 Computer Hacking Forensic Investigator (CHFI)
Question 4 of 5
0% complete
Q4 Single choice

To preserve digital evidence, an investigator should ____________

  • A

    Make two copies of each evidence item using a single imaging tool

  • B

    Make a single copy of each evidence item using an approved imaging tool

  • C

    Make two copies of each evidence item using different imaging tools

  • D

    Only store the original evidence item