Eccouncil Exam 212-82 Topic 10 Question 11 Discussion

Actual exam question for Eccouncil's 212-82 exam

Question #: 11
Topic #: 10

You've been called in as a computer forensics investigator to handle a case involving a missing company laptop from the accounting department, which contained sensitive financial dat

a. The company suspects a potential data breach and wants to recover any evidence from the missing device. What is your MOST important initial action regarding the digital evidence?

ATurn on the laptop (if found) and search for deleted files.

BInterview company personnel to understand the missing laptop's usage.

CReport the incident to law enforcement immediately.

DSecure the scene where the laptop was last seen (if possible).

Show Suggested Answer

Suggested Answer: C

by Haydee at Feb 05, 2023, 09:33 PM

Limited Time Offer

25%

Off

Get Premium 212-82 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bev

5 days ago

Option D is the way to go! Securing the scene is crucial to preserve any potential digital evidence. Rushing to turn on the laptop could wipe out critical data.

upvoted 0 times

...