BCS Exam CISMP-V9 Topic 1 Question 56 Discussion

Actual exam question for BCS's CISMP-V9 exam

Question #: 56
Topic #: 1

When preserving a crime scene for digital evidence, what actions SHOULD a first responder initially make?

ARemove power from all digital devices at the scene to stop the data changing.

BPhotograph all evidence and triage to determine whether live data capture is necessary.

CRemove all digital evidence from the scene to prevent unintentional damage.

DDon't touch any evidence until a senior digital investigator arrives.
https://www.ncjrs.gov/pdffiles1/nij/219941.pdf

Show Suggested Answer

Suggested Answer: D

by Jovita at Apr 21, 2023, 08:15 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!