Multiple Choice
You are at an incident scene and determine that a computer contains evidence as described in the search warrant. When you seize the computer, you should:
A) Record the identity of the person(s) involved in the seizure.
B) Record the location that the computer was recovered from.
C) Record nothing to avoid inaccuracies that might jeopardize the use of the evidence.
D) Record the date and time the computer was seized.
Correct Answer:

Verified
Correct Answer:
Verified
Q100: A CPU is:<br>A) A chip that would
Q101: If cluster number 10 in the FAT
Q102: The boot partition table found at the
Q103: How many clusters can a FAT 16
Q104: The following keyword was typed in exactly
Q106: How many partitions can be found in
Q107: ROM is an acronym for:<br>A) Random Open
Q108: You are conducting an investigation and have
Q109: A standard Windows 98 boot disk is
Q110: When a document is printed using EMF