Investigators may encounter issues with image file compatibility after acquiring data from suspect media.

According to the CHFI v11 objectives underImage/Evidence ExaminationandOperating System Forensics, one of the most significant challenges investigators face when preparing image files for examination isfile system compatibility across operating systems.APFS (Apple File System)is the default file system used by modern macOS devices, and it isnot natively supported on Windows workstations. This creates a clear challenge when investigators attempt to analyze APFS-based forensic images on Windows platforms.

CHFI v11 highlights that special tools, drivers, or forensic platforms are required to mount, parse, and analyze APFS volumes on non-macOS systems. Without proper support, investigators may be unable to access directories, metadata, snapshots, or encrypted APFS containers, potentially delaying investigations or risking incomplete analysis.

The other options describe scenarios that are typically manageable with standard forensic workflows. Converting E01 images (Option A) is well-supported using tools like ewfmount. Creating bootable VMs (Option C) is an advanced but solvable task using virtualization tools. Viewing images on macOS (Option D) is generally straightforward with native or commercial forensic software.

The CHFI Exam Blueprint v4 explicitly mentionsAPFS file system analysis challengesand cross-platform compatibility issues as key considerations during forensic image preparation. Therefore, handling APFS file systems on a Windows workstation represents a genuine and commonly encountered challenge, making Option B the correct and exam-aligned answer