EC-Council
512-50 · Question #391
In terms of supporting a forensic investigation, it is now imperative that managers, first- responders, etc., accomplish the following actions to the computer under investigation:
The correct answer is B. Secure the area and attempt to maintain power until investigators arrive. See the full explanation below for the reasoning.
Question
In terms of supporting a forensic investigation, it is now imperative that managers, first- responders, etc., accomplish the following actions to the computer under investigation:
Options
- ASecure the area and shut-down the computer until investigators arrive
- BSecure the area and attempt to maintain power until investigators arrive
- CImmediately place hard drive and other components in an anti-static bag
- DSecure the area.
How the community answered
(44 responses)- A9% (4)
- B73% (32)
- C16% (7)
- D2% (1)
Community Discussion
No community discussion yet for this question.