EC-CouncilEC-Council
312-49 · Question #93
312-49 Question #93: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49 to reveal the answer and full explanation for question #93. The question stem and answer options stay visible for context.
Submitted by kevin_r· Apr 18, 2026Computer Forensics Investigation Process
Question
First response to an incident may involve three different groups of people, and each will have differing skills and need to carry out differing tasks based on the incident. Who is responsible for collecting, preserving, and packaging electronic evidence?
Options
- ASystem administrators
- BLocal managers or other non-forensic staff
- CForensic laboratory staff
- DLawyers
Unlock 312-49 to see the answer
You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Incident Response#Evidence Collection#Evidence Preservation#Digital Forensics Roles