nerdexam
EC-CouncilEC-Council

312-49 · Question #173

312-49 Question #173: Real Exam Question with Answer & Explanation

Sign in or unlock 312-49 to reveal the answer and full explanation for question #173. The question stem and answer options stay visible for context.

Submitted by omar99· Apr 18, 2026Computer Forensics Investigation Process

Question

Paul is a computer forensics investigator working for Tyler & Company Consultants. Paul has been called upon to help investigate a computer hacking ring broken up by the local police. Paul begins to inventory the PCs found in the hackers?hideout. Paul then comes across a PDA left by them that is attached to a number of different peripheral devices. What is the first step that Paul must take with the PDA to ensure the integrity of the investigation?

Options

  • APlace PDA, including all devices, in an antistatic bag
  • BUnplug all connected devices
  • CPower off all devices if currently on
  • DPhotograph and document the peripheral devices

Unlock 312-49 to see the answer

You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Mobile Forensics#Evidence Handling#Scene Documentation#Forensic Procedure
Full 312-49 PracticeBrowse All 312-49 Questions