ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 73 - ECSS discussion

Report
Export

Below are the various steps involved in an email crime investigation.

1.Acquiring the email data

2.Analyzing email headers

3.Examining email messages

4.Recovering deleted email messages

5.Seizing the computer and email accounts

6.Retrieving email headers

What is the correct sequence of steps involved in the investigation of an email crime?

A.

5->l->3->6-->2 >4

Answers
A.

5->l->3->6-->2 >4

B.

2->4->3-->6->5-->l

Answers
B.

2->4->3-->6->5-->l

C.

1--->3->4--->2-->5'>6

Answers
C.

1--->3->4--->2-->5'>6

D.

5 -> 1 -> 6 -> 2 -> 3 -> 4

Answers
D.

5 -> 1 -> 6 -> 2 -> 3 -> 4

Suggested answer: D

Explanation:

Seizing the computer and email accounts (Step 5): This is the initial step to secure potential evidence. It involves physically or remotely seizing the suspect's computer and email accounts to prevent tampering.

Acquiring the email data (Step 1): After seizing the devices, investigators acquire the email data. This includes collecting email files, attachments, and metadata.

Retrieving email headers (Step 6): Email headers contain valuable information such as sender IP addresses, timestamps, and routing details. Retrieving headers helps trace the email's origin.

Analyzing email headers (Step 2): Investigators analyze the headers to identify any anomalies, spoofing, or suspicious patterns.

Examining email messages (Step 3): Investigators review the actual email content, attachments, and any embedded links. This step helps understand the context and intent.

Recovering deleted email messages (Step 4): Deleted emails may contain critical evidence. Investigators use specialized tools to recover deleted messages.

EC-Council Certified Security Specialist (E|CSS) documents and study guide.

EC-Council Certified Security Specialist (E|CSS) course materials123

asked 24/10/2024
Subramaniam Pratheep
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first