nerdexam
EC-CouncilEC-Council

312-49 · Question #573

312-49 Question #573: Real Exam Question with Answer & Explanation

The correct answer is B: Administrative Investigation. An administrative investigation is conducted internally by an organization to determine policy violations, employee misconduct, or internal incidents — such as whether a data loss was accidental or deliberate. No law enforcement or courts are involved at this stage. A criminal

Submitted by lukas.cz· Apr 18, 2026Computer Forensics in Today's World

Question

Korey, a data mining specialist in a knowledge processing firm DataHub.com, reported his CISO that he has lost certain sensitive data stored on his laptop. The CISO wants his forensics investigation team to find if the data loss was accident or intentional. In which of the following category this case will fall?

Options

  • ACivil Investigation
  • BAdministrative Investigation
  • CBoth Civil and Criminal Investigations
  • DCriminal Investigation

Explanation

An administrative investigation is conducted internally by an organization to determine policy violations, employee misconduct, or internal incidents — such as whether a data loss was accidental or deliberate. No law enforcement or courts are involved at this stage. A criminal investigation involves violation of laws pursued by law enforcement. A civil investigation involves disputes between parties litigated in court. Since this is an internal HR/security matter initiated by the CISO within DataHub.com, it is administrative.

Topics

#Administrative Investigation#Types of Investigations#Internal Investigation#Incident Classification

Community Discussion

No community discussion yet for this question.

Full 312-49 PracticeBrowse All 312-49 Questions