nerdexam
EC-Council

312-49 · Question #487

The need for computer forensics is highlighted by an exponential increase in the number of cybercrimes and litigations where large organizations were involved. Computer forensics plays an important…

The correct answer is D. Extract, process, and interpret the factual evidence so that it proves the attacker's actions in the. The primary purpose of computer forensics is to identify, preserve, collect, analyze, and present digital evidence in a legally admissible manner. The goal is to reconstruct what happened and attribute actions to a suspect in a way that withstands judicial scrutiny. Minimizing…

Submitted by hans_de· Apr 18, 2026Computer Forensics in Today's World

Question

The need for computer forensics is highlighted by an exponential increase in the number of cybercrimes and litigations where large organizations were involved. Computer forensics plays an important role in tracking the cyber criminals. The main role of computer forensics is to:

Options

  • AMaximize the investigative potential by maximizing the costs
  • BHarden organization perimeter security
  • CDocument monitoring processes of employees of the organization
  • DExtract, process, and interpret the factual evidence so that it proves the attacker's actions in the

How the community answered

(42 responses)
  • B
    2% (1)
  • C
    5% (2)
  • D
    93% (39)

Explanation

The primary purpose of computer forensics is to identify, preserve, collect, analyze, and present digital evidence in a legally admissible manner. The goal is to reconstruct what happened and attribute actions to a suspect in a way that withstands judicial scrutiny. Minimizing costs (A), hardening perimeter security (B), and monitoring employees (C) are adjacent IT/security activities but are not the defining role of forensic investigation.

Topics

#Computer Forensics Purpose#Evidence Management#Cybercrime Context

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice