ECCouncil Exam Questions

When performing a forensics analysis, what device is used to prevent the system from recording data

When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

A. a write-blocker

B. a protocol analyzer

C. a firewall

D. a disk editor