Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Isaca Certified Information Security Manager CISM Question # 269 Topic 27 Discussion

Isaca Certified Information Security Manager CISM Question # 269 Topic 27 Discussion

CISM Exam Topic 27 Question 269 Discussion:
Question #: 269
Topic #: 27

A forensic examination of a PC is required, but the PC has been switched off. Which of the following should be done FIRST?


A.

Perform a backup of the hard drive using backup utilities.


B.

Perform a bit-by-bit backup of the hard disk using a write-blocking device


C.

Perform a backup of the computer using the network


D.

Reboot the system using third-party forensic software in the CD-ROM drive


Get Premium CISM Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.