GAQM Exam CFA-001 Topic 3 Question 82 Discussion

Actual exam question for GAQM's CFA-001 exam

Question #: 82
Topic #: 3

What is the First Step required in preparing a computer for forensics investigation?

ADo not turn the computer off or on, run any programs, or attempt to access data on a computer

BSecure any relevant media

CSuspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue

DIdentify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination

Show Suggested Answer

Suggested Answer: A

by Merlyn at May 02, 2024, 11:25 AM

Limited Time Offer

25%

Off

Get Premium CFA-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cathrine

2 months ago

Clearly, the correct answer is A. Don't touch anything, or you might end up in the digital doghouse!

upvoted 0 times

Terrilyn

1 months ago

D) Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination

upvoted 0 times

...

Judy

1 months ago

C) Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue

upvoted 0 times

...

Lenora

1 months ago

B) Secure any relevant media

upvoted 0 times

...

Royal

2 months ago

A) Do not turn the computer off or on, run any programs, or attempt to access data on a computer

upvoted 0 times

...

Jacquline

2 months ago

D sounds like a lot of work. Can't we just turn it off and on again and call it a day?

upvoted 0 times

...

Sunny

3 months ago

Haha, I bet the answer is C. Who doesn't love a good document destruction suspension policy?

upvoted 0 times

Jenifer

1 months ago

C) Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue

upvoted 0 times

...

Alline

1 months ago

B) Secure any relevant media

upvoted 0 times

...

Charolette

2 months ago

A) Do not turn the computer off or on, run any programs, or attempt to access data on a computer

upvoted 0 times

...

Sueann

3 months ago

I think B is the way to go. Securing the relevant media should be the top priority.

upvoted 0 times

Carey

2 months ago

User 3: It's important to make sure the data is preserved and not tampered with.

upvoted 0 times

...

Sommer

2 months ago

User 2: Definitely, that should be the first step in preparing for a computer forensics investigation.

upvoted 0 times

...

Wenona

2 months ago

User 1: I agree, securing the relevant media is crucial.

upvoted 0 times

...

Margret

3 months ago

A is the correct answer. We must preserve the state of the computer as it is to avoid any potential evidence tampering or destruction.

upvoted 0 times

Colette

1 months ago

D) Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination

upvoted 0 times

...

Alease

1 months ago

C) Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue

upvoted 0 times

...

Kate

1 months ago

B) Secure any relevant media

upvoted 0 times

...

Ammie

1 months ago

A) Do not turn the computer off or on, run any programs, or attempt to access data on a computer

upvoted 0 times

...

Lazaro

3 months ago

I believe identifying the type of data and urgency level is also important (Option D)

upvoted 0 times

...

Jolanda

3 months ago

I agree with Dottie, securing the media is crucial to preserve evidence

upvoted 0 times

...

Dottie

4 months ago

I think the first step is to secure any relevant media (Option B)

upvoted 0 times

...