Which of the following is NOT a part of pre-investigation phase?

The correct answer is C. Gathering evidence data. The pre-investigation phase covers all preparation activities before an investigation begins: building the forensics workstation, assembling the investigation team, and gathering background information about the incident (scope, nature, etc.). Gathering evidence data is an active

Submitted by haru.x· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

ABuilding forensics workstation
BGathering information about the incident
CGathering evidence data
DCreating an investigation team

How the community answered

(29 responses)

A
3% (1)
B
3% (1)
C
93% (27)

Explanation

The pre-investigation phase covers all preparation activities before an investigation begins: building the forensics workstation, assembling the investigation team, and gathering background information about the incident (scope, nature, etc.). Gathering evidence data is an active investigative activity that belongs to the investigation phase, where the actual collection, preservation, and examination of digital evidence takes place.

Topics

#Digital Forensics Process#Investigation Phases#Pre-investigation#Evidence Collection

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice