Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

BCS CISMP-V9 Exam - Topic 1 Question 56 Discussion

When preserving a crime scene for digital evidence, what actions SHOULD a first responder initially make?
D) Don't touch any evidence until a senior digital investigator arrives. https://www.ncjrs.gov/pdffiles1/nij/219941.pdf
A) Remove power from all digital devices at the scene to stop the data changing.
B) Photograph all evidence and triage to determine whether live data capture is necessary.
C) Remove all digital evidence from the scene to prevent unintentional damage.

BCS CISMP-V9 Exam - Topic 1 Question 56 Discussion

Actual exam question for BCS's CISMP-V9 exam
Question #: 56
Topic #: 1
[All CISMP-V9 Questions]

When preserving a crime scene for digital evidence, what actions SHOULD a first responder initially make?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Jovita at Apr 21, 2023, 08:15 PM

Limited Time Offer

25%

Off

Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lili
9 months ago
C sounds risky, you might lose evidence if you move it too soon.
upvoted 0 times
...
Johnetta
9 months ago
Always photograph before touching anything, that's a must!
upvoted 0 times
...
Dorothy
9 months ago
Wait, are we really supposed to just leave everything untouched?
upvoted 0 times
...
Ines
9 months ago
I disagree, removing power can lose crucial data.
upvoted 0 times
...
Jessenia
9 months ago
B is definitely the right move, gotta document everything first!
upvoted 0 times
...
Arlette
10 months ago
I recall being told not to touch anything until a senior investigator arrives, but I wonder if there are exceptions in urgent situations.
upvoted 0 times
...
Glory
10 months ago
I practiced a question similar to this where we had to prioritize actions. I think triaging evidence is really important before making any moves.
upvoted 0 times
...
Giovanna
10 months ago
I'm not so sure about removing power from devices. I feel like that could lead to losing important data, but I can't remember the exact details.
upvoted 0 times
...
Danica
10 months ago
I think we should definitely photograph everything first. I remember that being emphasized in class as a crucial step.
upvoted 0 times
...
Tina
10 months ago
Hmm, the question mentions the category level value changing over time, so I'll need to find a way to handle that. Maybe option A about adding filters for updated_in and created_in could work.
upvoted 0 times
...
Sylvie
10 months ago
Wait, is this really asking about the purpose of communication in general, or is there some specific context I'm missing? The options seem a bit random. I'll have to re-read the question more closely before answering.
upvoted 0 times
...
Annice
10 months ago
Ugh, I hate questions like this. History is not my strong suit, and I always struggle with these kinds of specific details. I'm just going to take a guess and hope for the best.
upvoted 0 times
...

Save Cancel