exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 59 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 59
Topic #: 1
[All 312-49v10 Questions]

Why should you note all cable connections for a computer you want to seize as evidence?

  • A. to know what outside connections existed
  • B. in case other devices were connected
  • C. to know what peripheral devices exist
  • D. to know what hardware existed
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
044f354
4 months ago
Selected Answer: A
(A) To know what outside connections existed ✅ – Helps identify network connections, external storage devices, or remote access points used in the case. This answer is inclusive of anything (outside connections). (BCD) each answer is limited to a single type of thing (device/peripherals/hardware).
upvoted 1 times
...
Elb
1 year ago
A and C The first step in seizing evidence during the bag-and-tag process is to plug the network cable back into the computer. Next, all cables near there terminal end should be labeled and an identical label should be placed next to its corresponding port. Once all the cables and ports have been properly labeled, the forensic examiner should again photograph the back of the computer at several different angels. Taking these photographs will serve as proof for how the computer was configured at the scene. This documentation will be useful if the forensic examiner must later reconstruct the system. Once documented, all the cables connected to the computer should be removed.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...