ECCouncil Exam Questions

To preserve digital evidence, an investigator should ____________________

To preserve digital evidence, an investigator should ____________________

A.
Make tow copies of each evidence item using a single imaging tool

B.
Make a single copy of each evidence item using an approved imaging tool

C.
Make two copies of each evidence item using different imaging tools

D.
Only store the original evidence item