212-89: EC-Council Certified Incident HandlerDemo

By ECCouncil · Question Mode

QuestionQ83

Forensic Readiness and First Response

Computer forensics is a methodical set of techniques and procedures used to gather evidence from computing equipment, various storage devices, and/or digital media so it can be presented coherently and meaningfully in a court of law. Which of the following is an appropriate sequence of steps in the computer forensics process?

  • A Examination> Analysis > Preparation > Collection > Reporting
  • B Preparation > Analysis > Collection > Examination > Reporting
  • C Analysis > Preparation > Collection > Reporting > Examination
  • D Preparation > Collection > Examination > Analysis > Reporting
Explanation

A sound computer-forensics workflow begins with preparation, followed by evidence collection, examination of the acquired data, analysis of the findings, and reporting of the results.

Community Discussion

No comments yet. Be the first to start the discussion!