EC-Council
312-49V9 · Question #211
Why should you never power on a computer that you need to acquire digital evidence from?
The correct answer is A. When the computer boots up, files are written to the computer rendering the data nclean?When. See the full explanation below for the reasoning.
Question
Why should you never power on a computer that you need to acquire digital evidence from?
Options
- AWhen the computer boots up, files are written to the computer rendering the data nclean?When
- BWhen the computer boots up, the system cache is cleared which could destroy evidence
- CWhen the computer boots up, data in the memory buffer is cleared which could destroy
- DPowering on a computer has no affect when needing to acquire digital evidence from it
How the community answered
(26 responses)- A77% (20)
- B15% (4)
- C4% (1)
- D4% (1)
Community Discussion
No community discussion yet for this question.