While troubleshooting a software error on a user's computer, a technician finds inappropriate content. Which of the following should the technician perform FIRST?

Question

Options

• APreserve the data on an external drive.
• BReport the discovery through proper channels.
• CDocument the findings.
• DErase the data and inform the user.

• B
  6% (1)
• C
  89% (16)
• D
  6% (1)

Explanation

When a technician discovers inappropriate content during routine troubleshooting, the first action is to document the findings. Documentation establishes a factual, timestamped record of what was discovered, which preserves evidence and supports chain of custody if the matter escalates to HR, legal, or law enforcement. Reporting through proper channels (B) is the correct next step after documenting - documentation gives the report credibility. Preserving data to an external drive (A) may be appropriate but typically comes after initial documentation and under proper authorization. Erasing the data (D) is never appropriate, as it destroys potential evidence and could constitute obstruction.

No community discussion yet for this question.