Câu 126: 312-49V11: Computer Hacking Forensic Investigator

Fred, a cybercrime investigator for the FBI, finished storing a solid-state drive in a static resistant bag and filled out the chain of custody form. Two days later, John grabbed the solid-state drive and created a clone of it (with write blockers enabled) in order to investigate the drive. He did not document the chain of custody though. When John was finished, he put the solid-state drive back in the static resistant and placed it back in the evidence locker. A day later, the court trial began and upon presenting the evidence and the supporting documents, the chief justice outright rejected them. Which of the following statements strongly support the reason for rejecting the evidence?

1. A. John did not document the chain of custody — đáp án hiện tại
2. B. Block clones cannot be created with solid-state drives
3. C. Write blockers were used while cloning the evidence
4. D. John investigated the clone instead of the original evidence itself