EC-CouncilEC-Council
312-49 · Question #3
312-49 Question #3: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49 to reveal the answer and full explanation for question #3. The question stem and answer options stay visible for context.
Submitted by minji_kr· Apr 18, 2026Computer Forensics Investigation Process
Question
Which of the following statements is incorrect related to acquiring electronic evidence at crime scene?
Options
- ASample banners are used to record the system activities when used by the unauthorized user
- BIn warning banners, organizations give clear and unequivocal notice to intruders that by signing
- CThe equipment is seized which is connected to the case, knowing the role of the computer which
- DAt the time of seizing process, you need to shut down the computer immediately
Unlock 312-49 to see the answer
You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Electronic Evidence Acquisition#Crime Scene Procedures#Volatile Data#Live System Forensics