Which of the following statements is incorrect when preserving digital evidence?

Question

Options

• ADocument the actions and changes that you observe in the monitor, computer, printer, or in other peripherals
• BVerily if the monitor is in on, off, or in sleep mode
• CRemove the power cable depending on the power state of the computer i.e., in on. off, or in sleep mode
• DTurn on the computer and extract Windows event viewer log files

• A
  5% (2)
• B
  17% (7)
• C
  10% (4)
• D
  69% (29)

No community discussion yet for this question.