GAQM CFA-001 Exam - Topic 1 Question 8 Discussion

Actual exam question for GAQM's CFA-001 exam

Question #: 8
Topic #: 1

A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:

ATake permission from all employees of the organization for investigation

BHarden organization network security

CCreate an image backup of the original evidence without tampering with potential evidence

DKeep the evidence a highly confidential and hide the evidence from law enforcement agencies

Show Suggested Answer

Suggested Answer: C

by Shenika at May 07, 2022, 11:02 PM

Limited Time Offer

25%

Off

Get Premium CFA-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Naomi

4 months ago

Really? I thought all evidence had to be shared with law enforcement.

upvoted 0 times

...

Hubert

4 months ago

B is essential for preventing future breaches, no doubt!

upvoted 0 times

...

Paola

4 months ago

Wow, I can't believe some people think D is acceptable!

upvoted 0 times

...

Augustine

4 months ago

I disagree, A is just as important for legal reasons.

upvoted 0 times

...

Rosalia

5 months ago

C is definitely the right choice! Image backups are crucial.

upvoted 0 times

...

Virgina

5 months ago

Hiding evidence from law enforcement? That sounds completely wrong. I can't see how D would ever be acceptable in a forensic investigation.

upvoted 0 times

...

Larae

5 months ago

I'm not entirely sure, but I think the investigator's role is more about handling evidence rather than asking for permission from employees. So, A doesn't feel right to me.

upvoted 0 times

...

Emile

5 months ago

I remember discussing the importance of creating an image backup during our practice sessions. It seems like option C could be the right choice.

upvoted 0 times

...

Taryn

5 months ago

I feel like we covered a question similar to this in class, and I think the focus was on preserving evidence. That makes me lean towards option C as well.

upvoted 0 times

...

Sherman

5 months ago

This is a good test of our command-line skills. I'm pretty confident I can identify the right OpenSSL command to verify the ISO file. I'll carefully read through the options and select the one that matches the description.

upvoted 0 times

...

Ahmed

5 months ago

Hmm, I'm a bit unsure about this one. I know Knowledge can provide self-service resources, but I'm not sure if that fully meets the "real-time" aspect. Maybe Queues and Bots could work better?

upvoted 0 times

...