The first thing a crime scene investigator should do when encountering computer forensic evidence is:
A) tape each cable to its adjoining component in an effort to preserve the integrity of the physical connections.
B) procure a warrant to search.
C) document the scene.
D) remove the system to the laboratory for processing.
E) unplug every device from the CPU to preserve the hard disk drive.
Correct Answer:
Verified
Q1: What keeps track of the location of
Q2: The ultimate goal of obtaining an image
Q3: When is it necessary to make a
Q4: Which of the following is NOT considered
Q6: The primary form of data storage within
Q7: A motherboard:
A) has a socket to accept
Q8: A cluster is a group of _
Q9: Evidentiary data may be recovered from which
Q10: One gigabyte can be expressed as:
A) 1,000
Q11: Which of the following is NOT considered
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents