New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GAQM CFA-001 Exam - Topic 1 Question 97 Discussion

Actual exam question for GAQM's CFA-001 exam
Question #: 97
Topic #: 1
[All CFA-001 Questions]

First response to an incident may involve three different groups of people, and each will have differing skills and need to carry out differing tasks based on the incident. Who is responsible for collecting, preserving, and packaging electronic evidence?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
Evan
3 months ago
Forensic staff is the way to go, no doubt about it!
upvoted 0 times
...
Boris
3 months ago
Wait, lawyers? Really? That seems off.
upvoted 0 times
...
Dominga
3 months ago
System admins should be involved, but not solely responsible.
upvoted 0 times
...
Lavonna
4 months ago
I think local managers can do it too, but not as well.
upvoted 0 times
...
Earnestine
4 months ago
Definitely forensic lab staff! They have the right skills.
upvoted 0 times
...
Rupert
4 months ago
I could be wrong, but I thought local managers might be involved in the process too, especially in the early stages. They might not be the main ones, though.
upvoted 0 times
...
Daren
4 months ago
I feel like this question is similar to one we practiced where we discussed roles in incident response. I think it was definitely the forensic staff who handle the evidence.
upvoted 0 times
...
Kristeen
4 months ago
I'm not entirely sure, but I remember something about system administrators having a role in initial response. Maybe they help secure the evidence first?
upvoted 0 times
...
Dick
5 months ago
I think it's the forensic laboratory staff who are responsible for collecting and preserving evidence. They have the right training for that, right?
upvoted 0 times
...
Desire
5 months ago
This is a tricky one, but I think the key is to focus on the specific task of collecting and preserving electronic evidence. Based on my understanding, that's typically the responsibility of the forensic laboratory staff, so I'm going to go with option C.
upvoted 0 times
...
Glendora
5 months ago
I'm a little confused by this question. I know that incident response involves multiple groups, but I'm not sure I fully understand the specific roles and responsibilities of each one. I'll need to review my notes and try to figure out the best approach to answering this.
upvoted 0 times
...
Lavonna
5 months ago
Hmm, I'm a bit unsure about this one. I know that different groups are involved in incident response, but I'm not sure which one is specifically responsible for collecting and preserving electronic evidence. I'll have to think this through carefully.
upvoted 0 times
...
Son
5 months ago
This seems like a straightforward question about incident response and digital forensics. I'm pretty confident that the correct answer is C - Forensic laboratory staff.
upvoted 0 times
...
Truman
5 months ago
Okay, let's see. The question is asking about who is responsible for the collection and preservation of electronic evidence. I'm thinking it's either the system administrators or the forensic laboratory staff. I'll have to weigh the options and make an educated guess.
upvoted 0 times
...
Margret
5 months ago
This seems like a tricky question. I'll need to think carefully about the key factors that enable IT to support agile needs.
upvoted 0 times
...
Rueben
10 months ago
I'm feeling pretty confident about this one. The forensic lab staff have the specialized training and equipment to properly handle electronic evidence. Gotta make sure the chain of custody is airtight, you know?
upvoted 0 times
Margarita
8 months ago
C) Forensic laboratory staff
upvoted 0 times
...
Tequila
9 months ago
B) Local managers or other non-forensic staff
upvoted 0 times
...
Arlean
10 months ago
A) System administrators
upvoted 0 times
...
...
Rozella
10 months ago
Ha! Imagine if the local managers or non-forensic staff tried to collect the evidence. They'd probably just end up deleting everything by mistake. Nope, gotta be the forensic lab folks.
upvoted 0 times
Gerald
9 months ago
C) Forensic laboratory staff
upvoted 0 times
...
Mattie
9 months ago
B) Local managers or other non-forensic staff
upvoted 0 times
...
Paz
9 months ago
A) System administrators
upvoted 0 times
...
...
Rebeca
10 months ago
I'm going to have to go with option C. Lawyers are great and all, but they're not really the ones you want handling the actual evidence. That's just asking for trouble.
upvoted 0 times
...
Reita
10 months ago
But what about system administrators? Don't they also play a role in collecting electronic evidence?
upvoted 0 times
...
Lilli
11 months ago
Hmm, I'm not so sure about that. System administrators might be better equipped to handle the technical aspects of evidence collection. They know the systems inside out.
upvoted 0 times
Roselle
10 months ago
A) System administrators
upvoted 0 times
...
Keneth
10 months ago
C) Forensic laboratory staff
upvoted 0 times
...
Lili
10 months ago
A) System administrators
upvoted 0 times
...
...
Edgar
11 months ago
Wait, are we dealing with a cybercrime here? If so, I think the forensic laboratory staff would be the ones responsible for collecting and preserving the electronic evidence. I mean, they're the experts, right?
upvoted 0 times
...
Gussie
11 months ago
I agree with Casey. Forensic experts have the necessary skills and knowledge to handle electronic evidence properly.
upvoted 0 times
...
Casey
11 months ago
I think the forensic laboratory staff is responsible for collecting, preserving, and packaging electronic evidence.
upvoted 0 times
...

Save Cancel