Multiple Choice
If a destructive program is running that might be destroying evidence,what should be done?
A) Perform an immediate full backup
B) Attempt to end the process
C) Pull the power cable
D) Record the destruction using a video capture of the screen
Correct Answer:

Verified
Correct Answer:
Verified
Q26: Matching<br>Match each correct item with the statement
Q27: The first step in asset management is
Q28: In computer forensics,hidden data such as deleted
Q29: Microsoft sometimes releases a majorgroup of patches
Q30: An active card,which contains an internal battery,can
Q32: What should be the first step of
Q33: Matching<br>Match each correct item with the statement
Q34: Which type of disaster recovery site is
Q35: A server that collects and stores raw
Q36: Matching<br>Match each correct item with the statement