a security technician is conducting a forensic analysis. which of the following actions is most likely to destroy critical evidence?