Why should you never power on a computer that you need to acquire digital evidence from?
A) When the computer boots up, files are written to the computer rendering the data nclean
B) When the computer boots up, the system cache is cleared which could destroy evidence
C) When the computer boots up, data in the memory buffer is cleared which could destroy evidence
D) Powering on a computer has no affect when needing to acquire digital evidence from it
Correct Answer:
Verified
Q57: What technique is used by JPEGs for
Q58: Before performing a logical or physical search
Q59: When reviewing web logs, you see an
Q60: How many times can data be written
Q61: When should an MD5 hash check be
Q63: A stakeholder is a person or group:
A)
Q64: What method of copying should always be
Q65: Preparing an image drive to copy files
Q66: Travis, a computer forensics investigator, is finishing
Q67: John is working as a computer forensics
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents