312-49V11: Computer Hacking Forensic InvestigatorDemo

Question

How is electronically stored information (ESI) gathered in an eDiscovery matter when investigators use secure network connections to access centrally managed computing environments instead of taking physical possession of the underlying storage media?

A Directed collection
B Incremental collection
C Remote acquisition
D Full disk acquisition

Explanation

Remote acquisition collects electronically stored information from systems accessed over a network rather than by physically obtaining their storage media. NIST recognizes cloud and centrally managed environments as digital-forensics contexts in which ownership and management of IT resources affect evidence-collection methods.

Learn more

NIST Cloud Computing Forensic Science

312-49V11: Computer Hacking Forensic InvestigatorDemo

AstroTutor

Notes

Readiness

QuestionQ416

Community Discussion