If You Are Tasked with Collecting Computer Evidence, Which of the Following

Multiple Choice

If you are tasked with collecting computer evidence, which of the following is the most appropriate choice:

A) Look at the data on scene by using normal start up and access procedures.
B) Use common software to start up the equipment to see if it works.
C) Leave the equipment in place until you consult with a computer crimes member that is trained to analyze the evidence.
D) Immediately unplug the system and transport to the computer crimes personnel.