Ren is assigned to handle a security incident of an organization. He is tasked with forensics investigation to find the evidence needed by the management. Which of the following steps falls under…

The correct answer is D. Evidence assessment. Evidence assessment is a critical step in the investigation phase of the computer forensics process. This step involves evaluating the evidence collected to determine its relevance and significance to the case at hand. It includes analyzing the secured data to identify what…

Computer Forensics in Incident Handling

Question

Ren is assigned to handle a security incident of an organization. He is tasked with forensics investigation to find the evidence needed by the management. Which of the following steps falls under the investigation phase of the computer forensics investigation process?

Options

ASecure the evidence
BRisk assessment
CSetup a computer forensics lab
DEvidence assessment

How the community answered

(15 responses)

C
7% (1)
D
93% (14)

Explanation

Evidence assessment is a critical step in the investigation phase of the computer forensics process. This step involves evaluating the evidence collected to determine its relevance and significance to the case at hand. It includes analyzing the secured data to identify what information can be used as evidence, its integrity, and how it can be related to the security incident. This phase is pivotal as it helps in building a coherent understanding of the incident and in establishing facts that can be presented in management reports or legal proceedings.

Topics

#computer forensics#investigation phase#evidence assessment#forensics process

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice