Which is a standard procedure to perform during all computer forensics investigations?

Question

Options

• AWith the hard drive in the suspect PC, check the date and time in the system CMOSWith the hard
• BWith the hard drive removed from the suspect PC, check the date and time in the system
• CWith the hard drive in the suspect PC, check the date and time in the File Allocation Table
• DWith the hard drive removed from the suspect PC, check the date and time in the system

• A
  5% (1)
• B
  74% (14)
• C
  5% (1)
• D
  16% (3)

No community discussion yet for this question.