ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 210-255 All Questions

View all questions & answers for the 210-255 exam
Go to Exam

Exam 210-255 topic 1 question 63 discussion

Actual exam question from Cisco's 210-255
Question #: 63
Topic #: 1
[All 210-255 Questions]

During which phase of the forensic process are tools and techniques used to extract the relevant information from the collective data?

  • A. examination
  • B. reporting
  • C. collection
  • D. investigation
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Examinations involve forensically processing large amounts of collected data using a combination of automated and manual methods to assess and extract data of particular interest, while preserving the integrity of the data. Forensic tools and techniques appropriate to the types of data that were collected are executed to identify and extract the relevant information from the collected data while protecting its integrity. Examination may use a combination of automated tools and manual processes.
Reference:
http://resources.infosecinstitute.com/computer-forensics-investigation-case-study/#gref
by [deleted] at April 3, 2025, 12:34 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel