During a financial-records tampering case in Denver, Colorado, forensic examiners struggle to analyze digital evidence...

The correct answer is C because the scenario focuses on anti-forensic measures that directly damage the trustworthiness of the evidence itself. If file integrity has been corrupted, important data renamed, and drives encrypted, the central forensic obstacle is that the reliability and integrity of the digital evidence are weakened. CHFI v11 specifically covers anti-forensics techniques and the challenges they create for investigators, including corruption, wiping, encryption, metadata manipulation, and other actions that interfere with accurate interpretation of evidence. Option A describes one possible anti-forensic tactic, but the question emphasizes integrity degradation of the evidence already in hand rather than fabricated redirection. Option B is narrower and speaks more to malware evasion than the broader evidentiary problem described. Option D is overstated and technically inaccurate because timestamp modification does not itself eliminate server logging. In CHFI-style reasoning, when anti-forensics causes examiners to doubt whether data is complete, authentic, or dependable, the most direct challenge is the weakening of evidence integrity and reliability. That is the obstacle best illustrated here.