正解:D
Abit-level imageis a forensic-grade copy that preservesalldata on a disk, including unallocated space, deleted files, and metadata. This is the most legally defensible form of digital evidence collection, as it ensures that no potential evidence is missed.
* Copying all access files (Option A)only captures live files and omits deleted or system-level artifacts that may be critical.
* Creating a file-level archive (Option B)is insufficient because it does not capture system metadata or slack space where forensic artifacts reside.
* Providing a full system backup inventory (Option C)may include important files, but it lacks forensic integrity because backups often modify timestamps and do not capture all system states.
Thus, the correct answer isD, as abit-level image ensures forensic integrity and completeness of evidence.