nerdexam
EC-Council

312-49V9 · Question #590

Which of the following statements is incorrect when preserving digital evidence?

The correct answer is B. Turn on the computer and extract Windows event viewer log files. See the full explanation below for the reasoning.

Question

Which of the following statements is incorrect when preserving digital evidence?

Options

  • AVerify if the monitor is in on, off, or in sleep mode
  • BTurn on the computer and extract Windows event viewer log files
  • CRemove the plug from the power router or modem
  • DDocument the actions and changes that you observe in the monitor, computer, printer, or in other

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    77% (17)
  • C
    14% (3)
  • D
    5% (1)

Community Discussion

No community discussion yet for this question.

Full 312-49V9 Practice