Topic 1, Exam Set A
What is the First Step required in preparing a computer for forensics investigation?
A . Do not turn the computer off or on, run any programs, or attempt to access data on a computer
B . Secure any relevant media
C . Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue
D . Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination
Answer: A