Evidence preservation
○ Evidence includes both the device (e.g., laptop hard disk) and the
data recovered from it
○ Perform analysis on a disk image, not the original drive, to prevent
modifications or alteration
A. Preservation
Explanation:
Preservation is the process of ensuring that digital evidence remains unchanged and intact from the moment it is discovered until it is used in a legal or investigative context.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.SY0-701 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
e2ba0ff
5 months, 1 week agoSegunmx
5 months, 1 week ago