EC-Council
312-49V9 · Question #590
Which of the following statements is incorrect when preserving digital evidence?
The correct answer is B. Turn on the computer and extract Windows event viewer log files. See the full explanation below for the reasoning.
Question
Which of the following statements is incorrect when preserving digital evidence?
Options
- AVerify if the monitor is in on, off, or in sleep mode
- BTurn on the computer and extract Windows event viewer log files
- CRemove the plug from the power router or modem
- DDocument the actions and changes that you observe in the monitor, computer, printer, or in other
How the community answered
(22 responses)- A5% (1)
- B77% (17)
- C14% (3)
- D5% (1)
Community Discussion
No community discussion yet for this question.