ECCouncil Exam Questions

To preserve digital evidence, an investigator should __…

To preserve digital evidence, an investigator should ____________________.

A.
Make two copies of each evidence item using a single imaging tool

B.
Make a single copy of each evidence item using an approved imaging tool

C.
Make two copies of each evidence item using different imaging tools

D.
Only store the original evidence item