EC-CouncilEC-Council
312-49 · Question #238
312-49 Question #238: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49 to reveal the answer and full explanation for question #238. The question stem and answer options stay visible for context.
Submitted by chen.hong· Apr 18, 2026Mobile Forensics
Question
If a PDA is seized in an investigation while the device is turned on, what would be the proper procedure?
Options
- AKeep the device powered on
- BTurn off the device immediately
- CRemove the battery immediately
- DRemove any memory cards immediately
Unlock 312-49 to see the answer
You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Mobile device seizure#Volatile data preservation#Live acquisition#Forensic procedure