EC-Council
312-49V9 · Question #202
A small law firm located in the Midwest has possibly been breached by a computer hacker looking to obtain information on their clientele. The law firm does not have any on-site IT employees, but…
The correct answer is D. Searching can change date/time stamps. See the full explanation below for the reasoning.
Question
A small law firm located in the Midwest has possibly been breached by a computer hacker looking to obtain information on their clientele. The law firm does not have any on-site IT employees, but wants to search for evidence of the breach themselves to prevent any possible media attention. Why would this not be recommended?
Options
- ASearching for evidence themselves would not have any ill effects
- BSearching could possibly crash the machine or device
- CSearching creates cache files, which would hinder the investigation
- DSearching can change date/time stamps
How the community answered
(31 responses)- A6% (2)
- B3% (1)
- C6% (2)
- D84% (26)
Community Discussion
No community discussion yet for this question.