37.0k views
5 votes
Is it important to securely wipe (erase) a disk before saving evidence to it?

A. Yes, Always
B. No, Not Necessary
C. Depends on the Content
D. Only for External Drives

User Tomte
by
7.2k points

1 Answer

5 votes

Final answer:

It is important to securely wipe a disk before saving evidence to it, to maintain the integrity of the evidence and prevent any cross-contamination with pre-existing data on the disk.

Step-by-step explanation:

When handling digital evidence, particularly in the context of forensic investigations, it is important to securely wipe (erase) a disk before saving evidence to it. The correct answer is A. Yes, Always. This ensures that the integrity of the evidence is maintained and that there is no pre-existing data on the storage media that could contaminate the evidence or be mistaken as part of the evidence. A secure wipe makes the disk a clean slate, removing any potential evidence cross-contamination and making sure that any recovery of data is solely from the new evidence being saved. This practice is in line with the guidelines for digital evidence handling as described by organizations like the National Institute of Standards and Technology (NIST)

User Tram
by
7.5k points