312-49 · Question #38
A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many
The correct answer is C. Create an image backup of the original evidence without tampering with potential evidence. A core responsibility of a forensic investigator is to create a forensic image (bit-for-bit copy) of the original evidence without modifying or tampering with it. This ensures the original evidence remains pristine and that all analysis is performed on the copy, preserving the ch
Question
A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:
Options
- ATake permission from all employees of the organization for investigation
- BHarden organization network security
- CCreate an image backup of the original evidence without tampering with potential evidence
- DKeep the evidence a highly confidential and hide the evidence from law enforcement agencies
How the community answered
(30 responses)- B3% (1)
- C90% (27)
- D7% (2)
Explanation
A core responsibility of a forensic investigator is to create a forensic image (bit-for-bit copy) of the original evidence without modifying or tampering with it. This ensures the original evidence remains pristine and that all analysis is performed on the copy, preserving the chain of custody. Taking permission from all employees (A) is not a forensic role. Hardening network security (B) is a security engineering task. Hiding evidence from law enforcement (D) is illegal and directly contradicts the investigator's duty to support the legal process.
Topics
Community Discussion
No community discussion yet for this question.