1. Home
  2. Discussions
  3. Logical Operations
  4. CyberSec First Responder
  5. CFR-210 Discussions
  6. CFR-210 Exam Topic 2 Question 12 Discussion

Logical Operations CyberSec First Responder CFR-210 Question # 12 Topic 2 Discussion

 Logical Operations Discussions      Browse All Questions      Go to Exam Detail      Get Premium Access
 Previous
Next  

Logical Operations CyberSec First Responder CFR-210 Question # 12 Topic 2 Discussion

CFR-210 Exam Topic 2 Question 12 Discussion:
Question #: 12
Topic #: 2

A forensics investigator has been assigned the task of investigating a system user for suspicion of using a company-owned workstation to view unauthorized content. Which of the following would be a proper course of action for the investigator to take?
A.

Notify the user that their workstation is being confiscated to perform an investigation, providing no details as to the reasoning.

B.

Confiscate the workstation while the suspected employee is out of the office, andperform a search on the asset.

C.

Confiscate the workstation while the suspected employee is out of the office, and perform the search on bit-for-bit image of the hard drive.

D.

Notify the user that the workstation is being confiscated to perform an investigation, providing complete transparency as to the suspicions.

Get Premium CFR-210 Questions
Actual exam question for Logical Operations CFR-210 exam by Kai9957 at Aug 2, 2025, 12:00:00 AM

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.

Submit
 Previous
Next