What Is the BEST Method If an Investigator Wishes to Analyze

question 196

Multiple Choice

What is the BEST method if an investigator wishes to analyze a hard drive which may be used as evidence?

• A) Leave the hard drive in place and use only verified and authenticated Operating Systems (OS) utilities to analyze the contents
• B) Log into the system and immediately make a copy of all relevant files to a Write Once, Read Many (WORM) device
• C) Remove the hard drive from the system and make a copy of the hard drive's contents using imaging hardware
• D) Use a separate bootable device to make a copy of the hard drive before booting the system and analyzing the hard drive

---

Definitions:

American Psychological Association

A professional organization representing psychology in the United States, aimed at advancing psychology as a science, a profession, and as a means of promoting health and human welfare.

APA Guidelines

Standards set by the American Psychological Association that govern ethics, research, and practice within the field of psychology.

Cognitive Approach

A psychological framework that focuses on mental processes such as perception, memory, and thinking, as essential components in understanding behavior.

Psychology

The scientific study of the mind and behavior, including the examination of conscious and unconscious phenomena, as well as feeling and thought.