Why should you note all cable connections for a computer you want to seize as evidence?

The correct answer is A. to know what outside connections existed. Documenting cable connections reveals what external connections existed at the time of seizure - such as network cables, modems, or internet connections - which directly informs the investigation about potential data transmission paths, remote access, or exfiltration routes…

Submitted by andreas_gr· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

Ato know what outside connections existed
Bin case other devices were connected
Cto know what peripheral devices exist
Dto know what hardware existed

How the community answered

(31 responses)

A
90% (28)
B
3% (1)
D
6% (2)

Explanation

Documenting cable connections reveals what external connections existed at the time of seizure - such as network cables, modems, or internet connections - which directly informs the investigation about potential data transmission paths, remote access, or exfiltration routes. While cables may also indicate peripheral devices (C) or hardware (D), the forensically critical reason is establishing what outside connections the suspect had, since data could have been sent to or received from remote systems.

Topics

#Evidence seizure#Documentation#Scene processing#Connectivity analysis

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice