Multiple Choice
What should be the FIRST action to protect the chain of evidence when a desktop computer is involved?
A) Take the computer to a forensic lab
B) Make a copy of the hard drive
C) Start documenting
D) Turn off the computer
Correct Answer:

Verified
Correct Answer:
Verified
Related Questions
Q117: What is the MOST common component of
Q118: During which of the following processes is
Q119: From a cryptographic perspective, the service of
Q120: Which of the following types of technologies
Q121: Which layer of the Open System Interconnection
Q123: Which of the following provides for the
Q124: Which one of the following activities would
Q125: To prevent inadvertent disclosure of restricted information,
Q126: In order to assure authenticity, which of
Q127: Which attack defines a piece of code