nerdexam
EC-Council

212-89 · Question #95

The following steps describe the key activities in forensic readiness planning: 1. Train the staff to handle the incident and preserve the evidence 2. Create a special process for documenting the…

The correct answer is B. 3-->4-->8-->7-->6-->1-->2-->5. The correct sequence of steps involved in forensic readiness planning, based on the activities described, is as follows: Identify the potential evidence required for an incident. Determine the source of the evidence. Define a policy that determines the pathway to legally…

Computer Forensics in Incident Handling

Question

The following steps describe the key activities in forensic readiness planning: 1. Train the staff to handle the incident and preserve the evidence 2. Create a special process for documenting the procedure 3. Identify the potential evidence required for an incident 4. Determine the source of the evidence 5. Establish a legal advisory board to guide the investigation process 6. Identify if the incident requires full or formal investigation 7. Establish a policy for securely handling and storing the collected evidence 8. Define a policy that determines the pathway to legally extract electronic evidence with minimal disruption Identify the correct sequence of steps involved in forensic readiness planning.

Options

  • A2-->3-->1-->4-->6-->5-->7-->8
  • B3-->4-->8-->7-->6-->1-->2-->5
  • C3-->1-->4-->5-->8-->2-->6-->7
  • D1-->2-->3-->4-->5-->6-->7-->8

How the community answered

(33 responses)
  • A
    9% (3)
  • B
    70% (23)
  • C
    3% (1)
  • D
    18% (6)

Explanation

The correct sequence of steps involved in forensic readiness planning, based on the activities described, is as follows: Identify the potential evidence required for an incident. Determine the source of the evidence. Define a policy that determines the pathway to legally extract electronic evidence with minimal Establish a policy for securely handling and storing the collected evidence. Identify if the incident requires full or formal investigation. Train the staff to handle the incident and preserve the evidence. Create a special process for documenting the procedure. Establish a legal advisory board to guide the investigation process. This sequence ensures that an organization is prepared to handle incidents efficiently, with a focus on identifying relevant evidence and the legal context of its collection, followed by staff training and the establishment of guiding policies and advisory boards.

Topics

#forensic readiness planning#evidence collection policy#digital forensics planning#forensic policy

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice