EC-Council
412-79V8 · Question #183
412-79V8 Question #183: Real Exam Question with Answer & Explanation
Sign in or unlock 412-79V8 to reveal the answer and full explanation for question #183. The question stem and answer options stay visible for context.
Question
A state department site was recently attacked and all the servers had their disks eraseD. The incident response team sealed the area and commenced investigation. During evidence collection they came across a zip disks that did not have the standard labeling on it. The incident team ran the disk on an isolated system and found that the system disk was accidentally eraseD. They decided to call in the FBI for further investigation. Meanwhile, they short listed possible suspects including three summer interns. Where did the incident team go wrong?
Options
- AThey examined the actual evidence on an unrelated system
- BThey attempted to implicate personnel without proof
- CThey tampered with evidence by using it
- DThey called in the FBI without correlating with the fingerprint data
Unlock 412-79V8 to see the answer
You've previewed enough free 412-79V8 questions. Unlock 412-79V8 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.