GAQM CFA-001 Exam - Topic 1 Question 97 Discussion

Actual exam question for GAQM's CFA-001 exam

Question #: 97
Topic #: 1

First response to an incident may involve three different groups of people, and each will have differing skills and need to carry out differing tasks based on the incident. Who is responsible for collecting, preserving, and packaging electronic evidence?

ASystem administrators

BLocal managers or other non-forensic staff

CForensic laboratory staff

DLawyers

Show Suggested Answer

Suggested Answer: A

by Denny at Sep 14, 2024, 07:35 PM

Limited Time Offer

25%

Off

Get Premium CFA-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Evan

9 months ago

Forensic staff is the way to go, no doubt about it!

upvoted 0 times

...

Boris

9 months ago

Wait, lawyers? Really? That seems off.

upvoted 0 times

...

Dominga

10 months ago

System admins should be involved, but not solely responsible.

upvoted 0 times

...

Lavonna

10 months ago

I think local managers can do it too, but not as well.

upvoted 0 times

...

Earnestine

10 months ago

Definitely forensic lab staff! They have the right skills.

upvoted 0 times

...

Rupert

10 months ago

I could be wrong, but I thought local managers might be involved in the process too, especially in the early stages. They might not be the main ones, though.

upvoted 0 times

...

Daren

10 months ago

I feel like this question is similar to one we practiced where we discussed roles in incident response. I think it was definitely the forensic staff who handle the evidence.

upvoted 0 times

...

Kristeen

11 months ago

I'm not entirely sure, but I remember something about system administrators having a role in initial response. Maybe they help secure the evidence first?

upvoted 0 times

...

Dick

11 months ago

I think it's the forensic laboratory staff who are responsible for collecting and preserving evidence. They have the right training for that, right?

upvoted 0 times

...

Desire

11 months ago

This is a tricky one, but I think the key is to focus on the specific task of collecting and preserving electronic evidence. Based on my understanding, that's typically the responsibility of the forensic laboratory staff, so I'm going to go with option C.

upvoted 0 times

...

Glendora

11 months ago

I'm a little confused by this question. I know that incident response involves multiple groups, but I'm not sure I fully understand the specific roles and responsibilities of each one. I'll need to review my notes and try to figure out the best approach to answering this.

upvoted 0 times

...

Lavonna

11 months ago

Hmm, I'm a bit unsure about this one. I know that different groups are involved in incident response, but I'm not sure which one is specifically responsible for collecting and preserving electronic evidence. I'll have to think this through carefully.

upvoted 0 times

...

Son

11 months ago

This seems like a straightforward question about incident response and digital forensics. I'm pretty confident that the correct answer is C - Forensic laboratory staff.

upvoted 0 times

...

Truman

11 months ago

Okay, let's see. The question is asking about who is responsible for the collection and preservation of electronic evidence. I'm thinking it's either the system administrators or the forensic laboratory staff. I'll have to weigh the options and make an educated guess.

upvoted 0 times

...

Margret

11 months ago

This seems like a tricky question. I'll need to think carefully about the key factors that enable IT to support agile needs.

upvoted 0 times

...

Rueben

1 year ago

I'm feeling pretty confident about this one. The forensic lab staff have the specialized training and equipment to properly handle electronic evidence. Gotta make sure the chain of custody is airtight, you know?

upvoted 0 times

Margarita

1 year ago

C) Forensic laboratory staff

upvoted 0 times

...

Tequila

1 year ago

B) Local managers or other non-forensic staff

upvoted 0 times

...

Arlean

1 year ago

A) System administrators

upvoted 0 times

...

Rozella

1 year ago

Ha! Imagine if the local managers or non-forensic staff tried to collect the evidence. They'd probably just end up deleting everything by mistake. Nope, gotta be the forensic lab folks.

upvoted 0 times

Gerald

1 year ago

C) Forensic laboratory staff

upvoted 0 times

...

Mattie

1 year ago

B) Local managers or other non-forensic staff

upvoted 0 times

...

Paz

1 year ago

A) System administrators

upvoted 0 times

...

Rebeca

1 year ago

I'm going to have to go with option C. Lawyers are great and all, but they're not really the ones you want handling the actual evidence. That's just asking for trouble.

upvoted 0 times

...

Reita

1 year ago

But what about system administrators? Don't they also play a role in collecting electronic evidence?

upvoted 0 times

...

Lilli

1 year ago

Hmm, I'm not so sure about that. System administrators might be better equipped to handle the technical aspects of evidence collection. They know the systems inside out.

upvoted 0 times

Roselle

1 year ago

A) System administrators

upvoted 0 times

...

Keneth

1 year ago

C) Forensic laboratory staff

upvoted 0 times

...

Lili

1 year ago

A) System administrators

upvoted 0 times

...

Edgar

1 year ago

Wait, are we dealing with a cybercrime here? If so, I think the forensic laboratory staff would be the ones responsible for collecting and preserving the electronic evidence. I mean, they're the experts, right?

upvoted 0 times

...

Gussie

1 year ago

I agree with Casey. Forensic experts have the necessary skills and knowledge to handle electronic evidence properly.

upvoted 0 times

...

Casey

1 year ago

I think the forensic laboratory staff is responsible for collecting, preserving, and packaging electronic evidence.

upvoted 0 times

...