EC-Council
312-49V11 · Question #19
312-49V11 Question #19: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #19. The question stem and answer options stay visible for context.
Question
Madison, a forensic investigator, has been assigned to investigate a case of email fraud, where the suspect allegedly used a compromised email account to send phishing emails to several victims. As part of the investigation, Madison must first obtain permission to conduct an on-site examination of the suspect's machine and the email server used for the fraudulent emails. What is the initial step that Madison must take before proceeding with the forensic examination?
Options
- ASeizing the computer and email accounts
- BRetrieving email headers
- CRecovering deleted email messages
- DAnalyzing email headers
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.