A forensic expert is given a hard drive from a crime scene and is asked to perform an investigation. Which of the following is the FIRST step the forensic expert needs to take the chain of custody?
A) Make a forensic copy
B) Create a hash of the hard drive
C) Recover the hard drive data
D) Update the evidence log
Correct Answer:
Verified
Q279: Which of the following controls allows a
Q280: When it comes to cloud computing, if
Q281: A remote intruder wants to take inventory
Q282: Which of the following uses precomputed hashes
Q283: A security analyst is reviewing an assessment
Q285: A computer emergency response team is called
Q286: An incident response manager has started to
Q287: An active/passive configuration has an impact on:
A)
Q288: An application was recently compromised after some
Q289: A recent internal audit is forcing a
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents