Multiple Choice
A forensic expert is given a hard drive from a crime scene and is asked to perform an investigation. Which of the following is the FIRST step the forensic expert needs to take the chain of custody?
A) Make a forensic copy
B) Create a hash of the hard drive
C) Recover the hard drive data
D) Update the evidence log
Correct Answer:
Verified
Correct Answer:
Verified
Q1101: Which of the following would be considered
Q1102: Which of the following uses tokens between
Q1103: An organization wants to deliver streaming audio
Q1104: Which of the following is the summary
Q1105: Security administrators attempted corrective action after a
Q1107: While reviewing system logs, a security analyst
Q1108: A root cause analysis reveals that a
Q1109: Security administrators attempted corrective action after a
Q1110: A security administrator wants to implement least
Q1111: A security administrator has received multiple calls