Question 5 (1 point) The main principle that should guide collection of digital evidence is that the most rapidly changing data should be collected first. True False Question 6 (1 point) The Direct Memory Access (DMA) approach to capturing memory has no risk of destroying potential evidence since it requires installing hardware and software and can require a system reboot. True False