EC-Council
212-89 · Question #102
212-89 Question #102: Real Exam Question with Answer & Explanation
Sign in or unlock 212-89 to reveal the answer and full explanation for question #102. The question stem and answer options stay visible for context.
Question
Bob, an incident responder at CyberTech Solutions, is investigating a cybercrime attack occurred in the client company. He acquired the evidence data, preserved it, and started performing analysis on acquired evidentiary data to identify the source of the crime and the culprit behind the incident. Identify the forensic investigation phase in which Bob is currently in.
Options
- AVulnerability assessment phase
- BPost-investigation phase
- CPre-investigation phase
- DInvestigation phas
Unlock 212-89 to see the answer
You've previewed enough free 212-89 questions. Unlock 212-89 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.