CISA Certified Information Systems Auditor – Question1375

What is the purpose of using a write blocker during the acquisition phase of a digital forensics investigation?

A.
To preserve chain of custody
B. To protect against self-destruct utilities
C. To prevent the activation of installed malware
D. To prevent evidence alteration

Correct Answer: D