Eccouncil Exam 212-82 Topic 10 Question 11 Discussion

Actual exam question for Eccouncil's 212-82 exam

Question #: 11
Topic #: 10

You've been called in as a computer forensics investigator to handle a case involving a missing company laptop from the accounting department, which contained sensitive financial dat

a. The company suspects a potential data breach and wants to recover any evidence from the missing device. What is your MOST important initial action regarding the digital evidence?

ATurn on the laptop (if found) and search for deleted files.

BInterview company personnel to understand the missing laptop's usage.

CReport the incident to law enforcement immediately.

DSecure the scene where the laptop was last seen (if possible).

Show Suggested Answer

Suggested Answer: C

by Haydee at Feb 05, 2023, 09:33 PM

Limited Time Offer

25%

Off

Get Premium 212-82 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Billy

5 days ago

I think we should also report the incident to law enforcement immediately to ensure a thorough investigation.

upvoted 0 times

...

Twana

9 days ago

I agree with Aaron. It's crucial to preserve any potential evidence before it's tampered with.

upvoted 0 times

...

Aaron

11 days ago

I think the most important initial action should be to secure the scene where the laptop was last seen.

upvoted 0 times

...