Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

BCS CISMP-V9 Exam - Topic 1 Question 56 Discussion

When preserving a crime scene for digital evidence, what actions SHOULD a first responder initially make?
D) Don't touch any evidence until a senior digital investigator arrives. https://www.ncjrs.gov/pdffiles1/nij/219941.pdf
A) Remove power from all digital devices at the scene to stop the data changing.
B) Photograph all evidence and triage to determine whether live data capture is necessary.
C) Remove all digital evidence from the scene to prevent unintentional damage.

BCS CISMP-V9 Exam - Topic 1 Question 56 Discussion

Actual exam question for BCS's CISMP-V9 exam
Question #: 56
Topic #: 1
[All CISMP-V9 Questions]

When preserving a crime scene for digital evidence, what actions SHOULD a first responder initially make?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Jovita at Apr 21, 2023, 08:15 PM

Limited Time Offer

25%

Off

Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lili
10 months ago
C sounds risky, you might lose evidence if you move it too soon.
upvoted 0 times
...
Johnetta
10 months ago
Always photograph before touching anything, that's a must!
upvoted 0 times
...
Dorothy
11 months ago
Wait, are we really supposed to just leave everything untouched?
upvoted 0 times
...
Ines
11 months ago
I disagree, removing power can lose crucial data.
upvoted 0 times
...
Jessenia
11 months ago
B is definitely the right move, gotta document everything first!
upvoted 0 times
...
Arlette
11 months ago
I recall being told not to touch anything until a senior investigator arrives, but I wonder if there are exceptions in urgent situations.
upvoted 0 times
...
Glory
11 months ago
I practiced a question similar to this where we had to prioritize actions. I think triaging evidence is really important before making any moves.
upvoted 0 times
...
Giovanna
11 months ago
I'm not so sure about removing power from devices. I feel like that could lead to losing important data, but I can't remember the exact details.
upvoted 0 times
...
Danica
11 months ago
I think we should definitely photograph everything first. I remember that being emphasized in class as a crucial step.
upvoted 0 times
...
Tina
11 months ago
Hmm, the question mentions the category level value changing over time, so I'll need to find a way to handle that. Maybe option A about adding filters for updated_in and created_in could work.
upvoted 0 times
...
Sylvie
12 months ago
Wait, is this really asking about the purpose of communication in general, or is there some specific context I'm missing? The options seem a bit random. I'll have to re-read the question more closely before answering.
upvoted 0 times
...
Annice
12 months ago
Ugh, I hate questions like this. History is not my strong suit, and I always struggle with these kinds of specific details. I'm just going to take a guess and hope for the best.
upvoted 0 times
...

Save Cancel