EC-Council
312-49V11 · Question #139
312-49V11 Question #139: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #139. The question stem and answer options stay visible for context.
Question
Following a cybersecurity incident at an organization, a forensic investigator is tasked with collecting Electronically Stored Information (ESI) as part of the investigation. To streamline the data collection process, the investigator restricts the range and size of ESI from custodians, limiting the collection to specific file types and directories on a computer. This approach ensures that only relevant information is collected while minimizing the impact on other devices. Which eDiscovery collection methodology is being used in this scenario?
Options
- AInvestigator leverages custodian self-collection to gather sensitive evidence data.
- BInvestigator uses incremental collection, focusing on newly created or modified data.
- CInvestigator uses remote acquisition of data from custodians' systems via network connections.
- DInvestigator employs a directed collection of definite data sets and system areas.
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.