Why do you use a disk-image backup to perform forensic investigations?
A.
The backup timestamps the files with the date and time during copy operations.
B.
The backup creates a bit-level copy of the entire disk.
C.
The backup includes areas that are used for the data store.
D.
This is a secure way to perform a file copy.