exam questions

Exam 312-49 All Questions

View all questions & answers for the 312-49 exam

Exam 312-49 topic 1 question 36 discussion

Actual exam question from ECCouncil's 312-49
Question #: 36
Topic #: 1
[All 312-49 Questions]

When investigating a potential e-mail crime, what is your first step in the investigation?

  • A. Trace the IP address to its origin
  • B. Write a report
  • C. Determine whether a crime was actually committed
  • D. Recover the evidence
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
MrRubi
Highly Voted 2 years, 10 months ago
Selected Answer: D
For me it would be D, understanding evidence as the email involved in the incident. Once you have the email, you can analyze the headers and trace the source IP that sent the email
upvoted 5 times
...
Bennoli13
Most Recent 10 months, 1 week ago
It's a POTENTIAL e-mail crime. The first step should be to confirm it first.
upvoted 3 times
AcroTiger
2 months, 3 weeks ago
Unless you recover the evidence, how would you determine if a crime was committed?
upvoted 1 times
...
...
lol105
1 year, 5 months ago
C. Determine whether a crime was actually committed, I think this is the correct answer cause if there is actually no crime we do not need to investigate
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago