ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam SY0-401 All Questions

View all questions & answers for the SY0-401 exam
Go to Exam

Exam SY0-401 topic 7 question 561 discussion

Actual exam question from CompTIA's SY0-401
Question #: 561
Topic #: 7
[All SY0-401 Questions]

Which of the following best describes the initial processing phase used in mobile device forensics?

  • A. The phone should be powered down and the battery removed to preserve the state of data on any internal or removable storage utilized by the mobile device
  • B. The removable data storage cards should be processed first to prevent data alteration when examining the mobile device
  • C. The mobile device should be examined first, then removable storage and lastly the phone without removable storage should be examined again
  • D. The phone and storage cards should be examined as a complete unit after examining the removable storage cards separately.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by [deleted] at March 9, 2025, 7:50 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel