Which of the following is true about attribution in a cybersecurity investigation?
A. A suspect-led approach is often accepted in supreme courts.
B. A suspect-led approach is pejorative and often biased to the disadvantage of those being investigated.
C. A suspect-led approach is mostly used in corporate investigations.
D. A suspect-led approach is mostly used in private investigations.
B. A suspect-led approach is pejorative and often biased to the disadvantage of those being investigated.
Pulled word per word in CCNA CyberOps Official guide book and it makes sense, why would the suspect lead the investigation right and pinpoint to himself?