nerdexam
CompTIA

CS0-003 · Question #5

When starting an investigation, which of the following must be done first?

The correct answer is B. Secure the scene. The first thing that must be done when starting an investigation is to secure the scene. Securing the scene involves isolating and protecting the area where the incident occurred, as well as any potential evidence or witnesses. Securing the scene can help prevent any tampering…

Submitted by certguy· Mar 6, 2026Security and Compliance

Question

When starting an investigation, which of the following must be done first?

Options

  • ANotify law enforcement
  • BSecure the scene
  • CSeize all related evidence
  • DInterview the witnesses

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    91% (39)
  • C
    2% (1)
  • D
    2% (1)

Explanation

The first thing that must be done when starting an investigation is to secure the scene. Securing the scene involves isolating and protecting the area where the incident occurred, as well as any potential evidence or witnesses. Securing the scene can help prevent any tampering, contamination, or destruction of evidence, as well as any interference or obstruction of the

Topics

#Incident response#Investigation#Secure the scene#First responder actions

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice