Discuss GAQM CFA-001 Exam Topic 1 Question 8

A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:

ATake permission from all employees of the organization for investigation

BHarden organization network security

CCreate an image backup of the original evidence without tampering with potential evidence

DKeep the evidence a highly confidential and hide the evidence from law enforcement agencies

Suggested Answer: C

Get Premium CFA-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

11 comments · newest first

Naomi 12 months ago

Really? I thought all evidence had to be shared with law enforcement.

Hubert 12 months ago

B is essential for preventing future breaches, no doubt!

Paola 1 year ago

Wow, I can't believe some people think D is acceptable!

Augustine 1 year ago

I disagree, A is just as important for legal reasons.

Rosalia 1 year ago

C is definitely the right choice! Image backups are crucial.

Virgina 1 year ago

Hiding evidence from law enforcement? That sounds completely wrong. I can't see how D would ever be acceptable in a forensic investigation.

Larae 1 year ago

I'm not entirely sure, but I think the investigator's role is more about handling evidence rather than asking for permission from employees. So, A doesn't feel right to me.

Emile 1 year ago

I remember discussing the importance of creating an image backup during our practice sessions. It seems like option C could be the right choice.

Taryn 1 year ago

I feel like we covered a question similar to this in class, and I think the focus was on preserving evidence. That makes me lean towards option C as well.

Sherman 1 year ago

This is a good test of our command-line skills. I'm pretty confident I can identify the right OpenSSL command to verify the ISO file. I'll carefully read through the options and select the one that matches the description.

Ahmed 1 year ago

Hmm, I'm a bit unsure about this one. I know Knowledge can provide self-service resources, but I'm not sure if that fully meets the "real-time" aspect. Maybe Queues and Bots could work better?

GAQM CFA-001 Exam - Topic 1 Question 8 Discussion