Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the
Posted: Tue Aug 16, 2022 6:12 am
Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the following actions should be performed after the crime scene is isolated?
A. Turn the computer on and collect volatile data
B. Turn the computer on and collect network information
C. Leave the computer off and prepare the computer for transportation to the laboratory
D. Remove the hard drive, prepare it for transportation, and leave the hardware at the scene
A. Turn the computer on and collect volatile data
B. Turn the computer on and collect network information
C. Leave the computer off and prepare the computer for transportation to the laboratory
D. Remove the hard drive, prepare it for transportation, and leave the hardware at the scene