Questions

1. Which definition best describes corroborative evidence from the point of view of a cybersecurity investigator?
   1. Evidence which stands alone and would be admissible, in the current format, in court
   2. Evidence which supports the conclusions made from a primary piece of evidence
   3. Evidence which directly contradicts the primary evidence
   4. Evidence which requires an explanation from "expert" testimony
2. An investigator discovers evidence of a crime on a client's hard drive. They copy the files from the client's drive to removable storage, creating the required documentation, and pass this on to the police. Which statement about the quality of the evidence is most suitable?
   1. The evidence is not "best" evidence as it doesn't attribute the files to the identified client
   2. The evidence has been contaminated by being copied and therefore won't...