You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB
storage area networks that store customer data.
What method would be most efficient for you to acquire digital evidence from this network?
A.
create a compressed copy of the file with DoubleSpace
B.
create a sparse data copy of a folder or file
C.
make a bit-stream disk-to-image file
D.
make a bit-stream disk-to-disk file