You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should:
A) Record nothing to avoid inaccuracies that might jeopardize the use of the evidence.
B) Record the location that the computer was recovered from.
C) Record the identity of the person(s) involved in the seizure.
D) Record the date and time the computer was seized.
Correct Answer:
Verified
Q55: When a drive letter is assigned to
Q56: A SCSI host adapter would most likely
Q57: In Windows, the file MyNote.txt is deleted
Q58: A case file can contain _ hard
Q59: Creating an image of a hard drive
Q61: The spool files that are created during
Q62: In Windows 2000 and XP, which of
Q63: Within EnCase, what is purpose of the
Q64: The following GREP expression was typed in
Q65: Which of the following selections is NOT
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents