Which of the following statements is incorrect when preserving digital evidence?

Question

Options

• ADocument the actions and changes that you observe in the monitor, computer, printer, or in other
• BVerily if the monitor is in on, off, or in sleep mode
• CRemove the power cable depending on the power state of the computer i.e., in on. off, or in sleep
• DTurn on the computer and extract Windows event viewer log files

• A
  9% (3)
• B
  3% (1)
• C
  6% (2)
• D
  82% (27)

No community discussion yet for this question.