312-49V11: Computer Hacking Forensic InvestigatorDemo

By ECCouncil · Question Mode

QuestionQ394

Procedures and Methodology

At a digital forensics laboratory in Phoenix, Arizona, newly seized exhibits arrive following a large, multi-site raid. The team performs a preliminary risk assessment, prioritizes the items to be worked on first because of the high volume, and records both analyzed and non-analyzed items together with their complexity. Which ENFSI phase does this work primarily represent?

  • A Live Analysis of the Remote Systems
  • B Laboratory Assessment
  • C Acquisition of Data
  • D Initial Case Evaluation
Explanation

Laboratory Assessment covers managing submitted exhibits for examination, including risk-related considerations, prioritizing a large volume of exhibits, and documenting which exhibits were or were not analyzed and the extent of the analysis. ENFSI’s Best Practice Manual specifically requires this documentation when selectively prioritizing exhibits in high-volume cases.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!