Which of the following defines computer forensics?
A)It is a discipline that combines elements of law and computer science to identify,collect,examine,and preserve data from computer systems,networks,and storage devices.
B)It evaluates an organization's security policy.
C)It detects viruses in a computer system and quarantines them.
D)It is the software and/or hardware that monitors system and network resources and notifies network security personnel when it detects network traffic that attempts to circumvent the security measures of a networked computer environment.

Question

Quizplus · Accepted Answer

Computer forensics refers to the practice of identifying, collecting, examining and preserving data from computer systems, networks, and storage devices for the purpose of investigation and presentation in a court of law. It is a combination of law and computer science and involves techniques such as data recovery, network forensics, and analysis of digital evidence. The other options are incorrect as they do not accurately define computer forensics.

Which of the Following Defines Computer Forensics