ExamGecko
Home Home / ISC / CISSP
Question list
Search
Search

Question 48 - CISSP discussion

Report
Export

What should be the FIRST action to protect the chain of evidence when a desktop computer is involved?

A.
Take the computer to a forensic lab
Answers
A.
Take the computer to a forensic lab
B.
Make a copy of the hard drive
Answers
B.
Make a copy of the hard drive
C.
Start documenting
Answers
C.
Start documenting
D.
Turn off the computer
Answers
D.
Turn off the computer
Suggested answer: C
asked 18/09/2024
Camrin Schroyer
30 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first