Which of the following is the MOST ACCURATE statement about imaging suspect computers' hard drives?

Explanation with Extracts= TheFraud Examiners Manualexplains:

“Forensic analysis should not be performed on suspect devices directly because doing so can alter or damage digital evidence, and imaging the data… allows a fraud examiner to view and analyse the contents of a computer without altering the original data in any way”.

Imaging creates an exact, sector-by-sector copy of the drive.

Thus, imaging protects original data integrity.