ECCouncil 312-49v10 Question Answer
Why should you never power on a computer that you need to acquire digital evidence from?
When the computer boots up, files are written to the computer rendering the data nclean
When the computer boots up, the system cache is cleared which could destroy evidence
When the computer boots up, data in the memory buffer is cleared which could destroy evidence
Powering on a computer has no affect when needing to acquire digital evidence from it
TESTED 24 Dec 2025
Copyright © 2014-2025 ACE4Sure. All Rights Reserved