Multiple Choice
In the case where digital investigators dealing with distributed systems need to collect data from remote sites, the following procedure is recommended:
A) Notify personnel at the remote sites to leave everything as is, and arrange for travel to the remote locations
B) Notify personnel at the remote sites to shut down all systems and send the hard drives to the forensic lab
C) Utilize remote forensics tools to acquire data from the remote sites' RAM as well as the hard drives
D) None of the above
Correct Answer:
Verified
Correct Answer:
Verified
Q9: What considerations are there when developing a
Q10: When entering a crime scene, the initial
Q11: When preparing a questionnaire for interviewing individuals
Q12: The proper collection of evidence at a
Q13: When first entering a crime scene, the
Q15: The following organizations have published guidelines for
Q16: The challenge to controlling access to a
Q17: When shutting down a live system it
Q18: The Fourth Amendment, like ECPA, only applies
Q19: When presenting evidence on an organizational network,