Which of the following is the LEAST ACCURATE statement about seizing a computer for examination?
A.
Before removing a computer system from a scene for further analysis, it is important to document the system’s setup with photographs or diagrams.
B.
When taking a computer for examination, if the computer is off, it should remain off when it is removed.
C.
When seizing a computer that is running, it is acceptable for a fraud examiner to review the files contained on the machine prior to seizing it.
D.
When seizing a computer for examination, the seizing party should look around the area for passwords because many people leave passwords near their computers.
This statement is the least accurate because, in most cases, a fraud examiner should not review files or examine the contents of a computer prior to seizing it. Any unauthorized access could compromise the integrity of the evidence. The examiner should document the system’s state and preserve the evidence without altering it.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
raochavan
1 week ago