exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 244 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 244
Topic #: 1
[All 312-49v10 Questions]

Paul is a computer forensics investigator working for Tyler & Company Consultants. Paul has been called upon to help investigate a computer hacking ring broken up by the local police. Paul begins to inventory the PCs found in the hackers hideout. Paul then comes across a PDA left by them that is attached to a number of different peripheral devices. What is the first step that Paul must take with the PDA to ensure the integrity of the investigation?

  • A. Place PDA, including all devices, in an antistatic bag
  • B. Unplug all connected devices
  • C. Power off all devices if currently on
  • D. Photograph and document the peripheral devices
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
044f354
1 day, 11 hours ago
Selected Answer: D
A. Incorrect: Placing in an antistatic bag is important but not the first step. B. Incorrect: Disconnecting devices before documentation risks losing crucial information. C. Incorrect: Powering off devices prematurely might lead to loss of volatile data. D. Correct: Documenting and photographing ensures the chain of custody and captures the setup for evidence integrity.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago