nerdexam
EC-CouncilEC-Council

212-82 · Question #137

212-82 Question #137: Real Exam Question with Answer & Explanation

Sign in or unlock 212-82 to reveal the answer and full explanation for question #137. The question stem and answer options stay visible for context.

Submitted by obi.ng· Mar 6, 2026Cloud Security Operations & Incident Response

Question

You've been called in as a computer forensics investigator to handle a case involving a missing company laptop from the accounting department, which contained sensitive financial data. The company suspects a potential data breach and wants to recover any evidence from the missing device. What is your MOST important initial action regarding the digital evidence?

Options

  • ATurn on the laptop (if found) and search for deleted files.
  • BInterview company personnel to understand the missing laptop's usage.
  • CReport the incident to law enforcement immediately.
  • DSecure the scene where the laptop was last seen (if possible).

Unlock 212-82 to see the answer

You've previewed enough free 212-82 questions. Unlock 212-82 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Digital forensics#Incident response#Evidence preservation#Chain of custody
Full 212-82 PracticeBrowse All 212-82 Questions