EC-Council
312-49V11 · Question #63
312-49V11 Question #63: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #63. The question stem and answer options stay visible for context.
Question
In an investigation involving a corporate data breach, the forensic investigator is tasked with recovering deleted files from a suspect's hard drive. The investigator is careful to confirm that the hard drive remains untouched and reliable, so they create a forensic image of the device and store it in a secure location to maintain its integrity for future analysis. This step is crucial to guarantee that the original data remains unaltered during the investigative process. Which responsibility of a forensic investigator is being fulfilled in this scenario?
Options
- AEnsuring appropriate handling and preservation of evidence.
- BEngaging with law enforcement and stakeholders during the investigation.
- CCreating structured reports for the court of law.
- DReconstructing the damaged storage devices to recover hidden information.
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.