Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the following actions should be performed after the crime scene is isolated?

Last Updated on March 22, 2022 by Admin 3

Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the following actions should be performed after the crime scene is isolated?

  • Turn the computer on and collect volatile data
  • Turn the computer on and collect network information
  • Leave the computer off and prepare the computer for transportation to the laboratory
  • Remove the hard drive, prepare it for transportation, and leave the hardware at the scene
0 0 votes
Article Rating
Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments