MENU
What is the First Step required in preparing a computer for forensics investigation?
Suggested Answer: A
Get Premium CFA-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
PA
Pauline
11 months ago
I agree with A, but I feel like D is also super important!
JI
Jina
11 months ago
Wait, are we sure A is the first step? Sounds too obvious.
JO
Joesph
11 months ago
C seems important too, but is it really the first step?
SH
Shizue
12 months ago
I think B is more critical, securing media is key.
PE
Peter
12 months ago
Definitely A, you can't mess with the scene!
HA
Haley
12 months ago
I thought identifying the type of data was more about planning the investigation rather than the first step. It feels like it comes later in the process.
TH
Thad
1 year ago
I vaguely recall something about suspending automated document destruction policies being crucial. It might be one of the first actions to take, but I can't remember clearly.
LU
Luther
1 year ago
I'm not entirely sure, but I feel like securing relevant media might be the first thing we need to do. It seems important to preserve evidence.
GL
Glory
1 year ago
I think the first step is definitely to not turn the computer off or on. I remember that being emphasized in our practice scenarios.
EU
Eun
1 year ago
Suspend automated document destruction and recycling policies? I didn't even know that was a thing. I'm just going to play it safe and not touch the computer at all.
LU
Luis
1 year ago
Okay, I think the key is to not do anything that could potentially alter or destroy the data on the computer. So option A looks like the way to go - don't turn it on, run programs, or try to access the data.
CA
Cassie
1 year ago
I'm pretty sure the first step is to not touch the computer at all and just secure any relevant media. That seems like the safest approach to preserve evidence.
JE
Jesusita
1 year ago
Hmm, I'm a bit confused. I thought we were supposed to identify the type of data and urgency first before doing anything else. But now I'm not sure.
RO
Rory
1 year ago
I think I've got this one. The key is to identify the method that is not a way to determine the sensor version. I'll go through the options and see which one doesn't fit.
CA
Carol
1 year ago
I've got this! Entity classes are used to assign risks and controls to the specific entities you're tracking. Options B and C seem to be the most relevant here.
CA
Cathrine
1 year ago
Clearly, the correct answer is A. Don't touch anything, or you might end up in the digital doghouse!
TE
Terrilyn
1 year ago
D) Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination
JU
Judy
1 year ago
C) Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue
LE
Lenora
1 year ago
B) Secure any relevant media
RO
Royal
1 year ago
A) Do not turn the computer off or on, run any programs, or attempt to access data on a computer
JA
Jacquline
1 year ago
D sounds like a lot of work. Can't we just turn it off and on again and call it a day?
SU
Sunny
1 year ago
Haha, I bet the answer is C. Who doesn't love a good document destruction suspension policy?
JE
Jenifer
1 year ago
C) Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue
AL
Alline
1 year ago
B) Secure any relevant media
CH
Charolette
1 year ago
A) Do not turn the computer off or on, run any programs, or attempt to access data on a computer
SU
Sueann
1 year ago
I think B is the way to go. Securing the relevant media should be the top priority.
CA
Carey
1 year ago
User 3: It's important to make sure the data is preserved and not tampered with.
SO
Sommer
1 year ago
User 2: Definitely, that should be the first step in preparing for a computer forensics investigation.
WE
Wenona
1 year ago
User 1: I agree, securing the relevant media is crucial.
MA
Margret
2 years ago
A is the correct answer. We must preserve the state of the computer as it is to avoid any potential evidence tampering or destruction.
CO
Colette
1 year ago
D) Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination
AL
Alease
1 year ago
C) Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue
KA
Kate
1 year ago
B) Secure any relevant media
AM
Ammie
1 year ago
A) Do not turn the computer off or on, run any programs, or attempt to access data on a computer
LA
Lazaro
2 years ago
I believe identifying the type of data and urgency level is also important (Option D)
JO
Jolanda
2 years ago
I agree with Dottie, securing the media is crucial to preserve evidence
DO
Dottie
2 years ago
I think the first step is to secure any relevant media (Option B)