BCS Foundation Certificate in Information Security Management Principles V9.0 CISMP-V9 Question # 10 Topic 2 Discussion

BCS Foundation Certificate in Information Security Management Principles V9.0 CISMP-V9 Question # 10 Topic 2 Discussion

CISMP-V9 Exam Topic 2 Question 10 Discussion:
Question #: 10
Topic #: 2

When preserving a crime scene for digital evidence, what actions SHOULD a first responder initially make?


A.

Remove power from all digital devices at the scene to stop the data changing.


B.

Photograph all evidence and triage to determine whether live data capture is necessary.


C.

Remove all digital evidence from the scene to prevent unintentional damage.


D.

Don't touch any evidence until a senior digital investigator arrives.


Get Premium CISMP-V9 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.