Multiple Choice
The first thing a crime scene investigator should do when encountering computer forensic evidence is:
A) tape each cable to its adjoining component in an effort to preserve the integrity of the physical connections.
B) procure a warrant to search.
C) document the scene.
D) remove the system to the laboratory for processing.
E) unplug every device from the CPU to preserve the hard disk drive.
Correct Answer:

Verified
Correct Answer:
Verified
Q5: Which of the following actions taken at
Q6: One should not search for "visible" data
Q7: A device that permits only requested traffic
Q8: One should not look for "latent" data
Q9: One of the most common places to
Q11: What are the areas of the computer
Q12: What keeps track of the location of
Q13: The complex of wires located on the
Q14: A motherboard:<br>A) has a socket to accept
Q15: Explain the various areas found on the