MENU
First response to an incident may involve three different groups of people, and each will have differing skills and need to carry out differing tasks based on the incident. Who is responsible for collecting, preserving, and packaging electronic evidence?
Suggested Answer: A
Get Premium CFA-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
EV
Evan
11 months ago
Forensic staff is the way to go, no doubt about it!
BO
Boris
11 months ago
Wait, lawyers? Really? That seems off.
DO
Dominga
11 months ago
System admins should be involved, but not solely responsible.
LA
Lavonna
12 months ago
I think local managers can do it too, but not as well.
EA
Earnestine
12 months ago
Definitely forensic lab staff! They have the right skills.
RU
Rupert
12 months ago
I could be wrong, but I thought local managers might be involved in the process too, especially in the early stages. They might not be the main ones, though.
DA
Daren
1 year ago
I feel like this question is similar to one we practiced where we discussed roles in incident response. I think it was definitely the forensic staff who handle the evidence.
KR
Kristeen
1 year ago
I'm not entirely sure, but I remember something about system administrators having a role in initial response. Maybe they help secure the evidence first?
DI
Dick
1 year ago
I think it's the forensic laboratory staff who are responsible for collecting and preserving evidence. They have the right training for that, right?
DE
Desire
1 year ago
This is a tricky one, but I think the key is to focus on the specific task of collecting and preserving electronic evidence. Based on my understanding, that's typically the responsibility of the forensic laboratory staff, so I'm going to go with option C.
GL
Glendora
1 year ago
I'm a little confused by this question. I know that incident response involves multiple groups, but I'm not sure I fully understand the specific roles and responsibilities of each one. I'll need to review my notes and try to figure out the best approach to answering this.
LA
Lavonna
1 year ago
Hmm, I'm a bit unsure about this one. I know that different groups are involved in incident response, but I'm not sure which one is specifically responsible for collecting and preserving electronic evidence. I'll have to think this through carefully.
SO
Son
1 year ago
This seems like a straightforward question about incident response and digital forensics. I'm pretty confident that the correct answer is C - Forensic laboratory staff.
TR
Truman
1 year ago
Okay, let's see. The question is asking about who is responsible for the collection and preservation of electronic evidence. I'm thinking it's either the system administrators or the forensic laboratory staff. I'll have to weigh the options and make an educated guess.
MA
Margret
1 year ago
This seems like a tricky question. I'll need to think carefully about the key factors that enable IT to support agile needs.
RU
Rueben
2 years ago
I'm feeling pretty confident about this one. The forensic lab staff have the specialized training and equipment to properly handle electronic evidence. Gotta make sure the chain of custody is airtight, you know?
MA
Margarita
1 year ago
C) Forensic laboratory staff
TE
Tequila
1 year ago
B) Local managers or other non-forensic staff
AR
Arlean
1 year ago
A) System administrators
RO
Rozella
2 years ago
Ha! Imagine if the local managers or non-forensic staff tried to collect the evidence. They'd probably just end up deleting everything by mistake. Nope, gotta be the forensic lab folks.
GE
Gerald
1 year ago
C) Forensic laboratory staff
MA
Mattie
1 year ago
B) Local managers or other non-forensic staff
PA
Paz
1 year ago
A) System administrators
RE
Rebeca
2 years ago
I'm going to have to go with option C. Lawyers are great and all, but they're not really the ones you want handling the actual evidence. That's just asking for trouble.
RE
Reita
2 years ago
But what about system administrators? Don't they also play a role in collecting electronic evidence?
LI
Lilli
2 years ago
Hmm, I'm not so sure about that. System administrators might be better equipped to handle the technical aspects of evidence collection. They know the systems inside out.
RO
Roselle
1 year ago
A) System administrators
KE
Keneth
2 years ago
C) Forensic laboratory staff
LI
Lili
2 years ago
A) System administrators
ED
Edgar
2 years ago
Wait, are we dealing with a cybercrime here? If so, I think the forensic laboratory staff would be the ones responsible for collecting and preserving the electronic evidence. I mean, they're the experts, right?
GU
Gussie
2 years ago
I agree with Casey. Forensic experts have the necessary skills and knowledge to handle electronic evidence properly.
CA
Casey
2 years ago
I think the forensic laboratory staff is responsible for collecting, preserving, and packaging electronic evidence.