If we discover a computer that is running, why do we not want to shut it down before inspecting it$?$

Question $4$ options:

a$)$

Shutting it down will delete the contents of storage

b$)$

Shutting it down will disconnect it from the Internet

c$)$

Shutting it down will delete the contents of memory

d$)$

Shutting it down will make it harder to reboot