nerdexam
EC-Council

212-89 · Question #102

Bob, an incident responder at CyberTech Solutions, is investigating a cybercrime attack occurred in the client company. He acquired the evidence data, preserved it, and started performing analysis on

Sign in or unlock 212-89 to reveal the answer and full explanation for question #102. The question stem and answer options stay visible for context.

Computer Forensics in Incident Handling

Question

Bob, an incident responder at CyberTech Solutions, is investigating a cybercrime attack occurred in the client company. He acquired the evidence data, preserved it, and started performing analysis on acquired evidentiary data to identify the source of the crime and the culprit behind the incident. Identify the forensic investigation phase in which Bob is currently in.

Options

  • AVulnerability assessment phase
  • BPost-investigation phase
  • CPre-investigation phase
  • DInvestigation phas

Unlock 212-89 to see the answer

You've previewed enough free 212-89 questions. Unlock 212-89 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#forensic investigation phases#evidence analysis#cybercrime investigation#investigation phase
Full 212-89 Practice