Câu 20: CFE - Investigation: Certified Fraud Examiner - Investigation

Which of the following is the MOST ACCURATE statement regarding the analysis phase in digital forensic investigations?

1. A. When analyzing data for evidence, fraud examiners should look for exculpatory evidence but not inculpatory evidence.
2. B. During the analysis phase, it is best to use just one forensic tool for identifying, extracting, and collecting digital evidence.
3. C. The primary concern when analyzing digital evidence is to maintain the integrity of the data at all times. — đáp án hiện tại
4. D. The analysis phase of digital forensic investigations should not commerce unless it is verified that the suspect devices do not contain relevant data.