Ever-changing advancement or mobile devices increases the complexity of mobile device examinations. Which or the following is an appropriate action for the mobile forensic investigation?

Question

Options

• ATo avoid unwanted interaction with devices found on the scene, turn on any wireless interfaces
• BDo not wear gloves while handling cell phone evidence to maintain integrity of physical evidence
• CIf the device's display is ON. the screen's contents should be photographed and, if necessary,
• DIf the phone is in a cradle or connected to a PC with a cable, then unplug the device from the

• B
  7% (2)
• C
  90% (27)
• D
  3% (1)

Explanation

Option C is the appropriate action: if a mobile device's display is ON, the screen contents should be photographed immediately to preserve volatile information (such as notifications, open apps, or messages) before the screen locks or the device loses power. Option A is incorrect - wireless interfaces should be turned OFF or the device placed in airplane mode or a Faraday bag to prevent remote wiping. Option B is incorrect - gloves should always be worn to preserve physical evidence (fingerprints). Option D is incorrect - if a phone is connected to a PC, it should not simply be unplugged without proper forensic procedure, as this could alter data.

No community discussion yet for this question.