Question 150
Main Page
Which of the following actions best helps avoid spoliation in digital forensics?
A. Overwrite files after review
B. Collect only logs, not memory
C. Document chain of custody and use write-blockers
D. Compress disk images
Answer: Document chain of custody and use write-blockers
Maintaining evidence integrity during collection is essential, using proper tools and tracking to prevent tampering.