nerdexam
EC-Council

312-49V9 · Question #211

Why should you never power on a computer that you need to acquire digital evidence from?

The correct answer is A. When the computer boots up, files are written to the computer rendering the data nclean?When. See the full explanation below for the reasoning.

Question

Why should you never power on a computer that you need to acquire digital evidence from?

Options

  • AWhen the computer boots up, files are written to the computer rendering the data nclean?When
  • BWhen the computer boots up, the system cache is cleared which could destroy evidence
  • CWhen the computer boots up, data in the memory buffer is cleared which could destroy
  • DPowering on a computer has no affect when needing to acquire digital evidence from it

How the community answered

(26 responses)
  • A
    77% (20)
  • B
    15% (4)
  • C
    4% (1)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Full 312-49V9 Practice