312-49V11 · Question #156
A Computer Hacking Forensic Investigator (CHFI) arrives at the crime scene in an incident involving cybercrime. While performing the initial search of the scene, the investigator spots a GPS device…
The correct answer is B. Initiate the search and seizure evidence log to document details of the identified devices. As soon as potential evidence is identified, the investigator should begin formal documentation (search and seizure/evidence log) to maintain chain of custody. Securing items and making detailed observations are important, but the evidence log is foundational for defensibility…
Question
A Computer Hacking Forensic Investigator (CHFI) arrives at the crime scene in an incident involving cybercrime. While performing the initial search of the scene, the investigator spots a GPS device, a keyboard, and a telephone line connected to a caller ID box. Considering the steps involved in searching for evidence, which of the following actions should the investigator perform first?
Options
- ASecure the keyboard to protect any potential fingerprints
- BInitiate the search and seizure evidence log to document details of the identified devices
- CRecord observations about the current situation at the scene
- DSurvey the GPS device to explore potential sources of digital information
How the community answered
(45 responses)- A7% (3)
- B80% (36)
- C11% (5)
- D2% (1)
Explanation
As soon as potential evidence is identified, the investigator should begin formal documentation (search and seizure/evidence log) to maintain chain of custody. Securing items and making detailed observations are important, but the evidence log is foundational for defensibility and accountability from the start.
Topics
Community Discussion
No community discussion yet for this question.