MENU
You've been called in as a computer forensics investigator to handle a case involving a missing company laptop from the accounting department, which contained sensitive financial dat
a. The company suspects a potential data breach and wants to recover any evidence from the missing device. What is your MOST important initial action regarding the digital evidence?
Suggested Answer: C
Get Premium 212-82 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
35 comments · newest first
NI
Nina
11 months ago
Not sure interviewing will help much if the laptop is already gone.
VA
Vanesa
11 months ago
Wait, shouldn't we report it to the police right away?
CA
Cassie
12 months ago
Turning on the laptop? That sounds risky!
AN
Annelle
12 months ago
I think securing the scene is crucial too.
JE
Jennifer
1 year ago
Definitely need to interview personnel first!
BE
Bernardo
1 year ago
Reporting to law enforcement seems important, but I wonder if we should gather more information first. I guess it depends on the situation and urgency.
AU
Audry
1 year ago
I practiced a similar question, and I remember that turning on the laptop could risk altering evidence. So, I think we should avoid that at all costs.
VI
Vi
1 year ago
I'm not entirely sure, but I feel like interviewing personnel could give us insights into the laptop's usage. It might help us understand if it was stolen or misplaced.
VE
Vernell
1 year ago
I think the first step should be to secure the scene where the laptop was last seen. If I remember correctly, preserving the environment is crucial for any evidence.
MA
Mayra
1 year ago
You know, I think I'd start by creating a new column that extracts the hour and day of the year from the IOT DateTime column. That could help with the analysis part.
KE
Kerry
1 year ago
Ah, I see what's going on now. The 'Automatic submission' setting in Firefox could be interfering with the Okta plugin's functionality. I'll make sure to test that out and see if it's the likely reason for the issue.
JO
Josphine
1 year ago
Option C is tempting, but reporting to law enforcement should be a secondary step. First, we need to make sure the scene is secured and the digital evidence is preserved. Can't have the feds snapping pictures of an unsecured crime scene, can we?
DA
Danica
1 year ago
B) Interview company personnel to understand the missing laptop's usage.
LI
Ligia
1 year ago
D) Secure the scene where the laptop was last seen (if possible).
LI
Lindsay
1 year ago
A) Turn on the laptop (if found) and search for deleted files.
GE
Gearldine
1 year ago
Haha, option A sounds like something a computer novice would do. Turning on the laptop and searching for deleted files? That's like trying to bake a cake with a sledgehammer!
BE
Ben
1 year ago
User 3: Definitely, we can't risk contaminating the evidence.
MA
Major
1 year ago
User 2: Yeah, we need to secure the scene first.
CR
Cruz
1 year ago
User 1: I agree, option A seems a bit reckless.
LE
Lenna
1 year ago
Hmm, I'm tempted to go with option B and interview the personnel. Understanding the laptop's usage history might give us some clues. But you're right, securing the scene should be the top priority.
KE
Kerry
1 year ago
B) Interview company personnel to understand the missing laptop's usage.
SA
Salley
1 year ago
D) Secure the scene where the laptop was last seen (if possible).
AR
Arlean
1 year ago
A) Turn on the laptop (if found) and search for deleted files.
BE
Bev
1 year ago
Option D is the way to go! Securing the scene is crucial to preserve any potential digital evidence. Rushing to turn on the laptop could wipe out critical data.
HO
Hollis
1 year ago
A) Turn on the laptop (if found) and search for deleted files.
DE
Deeanna
1 year ago
D) Secure the scene where the laptop was last seen (if possible).
EV
Eva
1 year ago
B) Interview company personnel to understand the missing laptop's usage.
AR
Arthur
1 year ago
A) Turn on the laptop (if found) and search for deleted files.
HA
Halina
1 year ago
D) Secure the scene where the laptop was last seen (if possible).
NE
Nell
1 year ago
C) Report the incident to law enforcement immediately.
LE
Leslie
1 year ago
B) Interview company personnel to understand the missing laptop's usage.
BO
Bo
1 year ago
A) Turn on the laptop (if found) and search for deleted files.
BI
Billy
2 years ago
I think we should also report the incident to law enforcement immediately to ensure a thorough investigation.
TW
Twana
2 years ago
I agree with Aaron. It's crucial to preserve any potential evidence before it's tampered with.
AA
Aaron
2 years ago
I think the most important initial action should be to secure the scene where the laptop was last seen.