Which of the following statements is incorrect when preserving digital evidence?

In what way do the procedures for dealing with evidence in a criminal case differ from the procedures for dealing with evidence in a civil case?

When needing to search for a website that is no longer present on the Internet today but was online few years back, what site can be used to view the website collection of pages?

While searching through a computer under investigation, you discover numerous files that appear to have had the first letter of the file name replaced by the hex code byte 5h.
What does this indicate on the computer?

What will the following command accomplish?
dd if=/dev/xxx of=mbr.backup bs=512 count=1