Which of the following is NOT a necessary step when documenting the crime scene?

Question

Options

• AUse the print screen function on the computer to save the disk image on the computer.
• BLabel all connections and cables.
• CPhotograph the computer and all peripherals attached to the computer.
• DPhotograph the building, room and the equipment being seized.

• A
  73% (27)
• B
  16% (6)
• C
  3% (1)
• D
  8% (3)

Explanation

Option A is correct because using the print screen function to "save a disk image" is both technically incorrect (print screen captures only what's visible on screen, not a forensic disk image) and procedurally wrong - powering on or interacting with a suspect computer before proper forensic imaging can alter or destroy evidence, violating chain of custody. Options B, C, and D are all legitimate crime scene documentation steps: labeling cables and connections ensures the scene can be reconstructed accurately; photographing the computer and peripherals creates a visual record of the equipment's state and configuration; and photographing the building, room, and surroundings establishes context for where and how the evidence was found.

Memory tip: Think "look, don't touch" - legitimate documentation steps (B, C, D) are all passive observation tasks (labeling, photographing). Option A is the odd one out because it requires interacting with the device, which is a forensic no-no before proper evidence seizure procedures are followed.

No community discussion yet for this question.