Amid a live intrusion at a utility provider in Phoenix, Arizona, responders identify an active...

The correct answer is A because the question describes exigent circumstances, specifically the imminent destruction of evidence. Legal references from Cornell’s Legal Information Institute explain that exigent circumstances permit warrantless action when there is an immediate risk that evidence will be destroyed and there is insufficient time to obtain a warrant. That is exactly the condition presented here: a live intrusion is underway, a backdoor is active, and logs show evidence being deleted in real time. CHFI v11 includes searches without a warrant, preserving evidence, and legal issues affecting forensic investigations, so candidates are expected to recognize emergency exceptions to the normal warrant requirement. The other options are valid legal concepts in different contexts, but they do not best match the specific facts given. Search incident to arrest depends on an arrest context, plain-view principles require a different evidentiary situation, and consent depends on authorization by the owner. Here, the clearest justification is the urgent need to prevent destruction of evidence before it disappears.