Bit stream image copy of the digital evidence must be performed in order to:

Bit stream image copy of the digital evidence must be performed in order to:
A . Prevent alteration to the original disk
B . Copy the FAT table
C . Copy all disk sectors including slack space
D . All the above

View Answer

Answer: C