Multiple Choice
Which of the following is NOT one of the recommended approaches to preserving digital evidence?
A) Place the evidential computers and storage media in secure storage for later processing.
B) Preview the evidential computer, taking appropriate notes.
C) Extract just the information needed from evidential computers and storage media.
D) Acquire everything from evidential computer and storage media.
Correct Answer:
Verified
Correct Answer:
Verified
Q21: When surveying the crime scene for hardware,
Q22: A sound forensic practice is to make
Q23: If possible, prior to entering a crime
Q24: At a crime scene, digital evidence will
Q25: The updated ACPO recommendation for seizing a
Q26: Which of the following is NOT an
Q28: Chain of custody documents record who handled
Q29: Under independent component doctrine, if a computer
Q30: The _documentation specifies who handled the evidence,
Q31: "dd" is the only way to make