CompTIA CySA+ CS0-003 Practice Question

Using write blockers is the best method to ensure digital evidence remains unaltered. A write blocker allows read-only access to the data, which prevents modifications during the acquisition process. Making copies can sometimes result in data being altered, and simply labeling devices doesn't protect them from accidental changes.