ECCouncil 312-49v11 Question Answer
A forensic investigator is assigned to a cybercrime investigation where they need to document critical evidence from a powered-on computer located at the crime scene. The computer is suspected to contain important files or programs that are part of the ongoing investigation, upon arriving at the scene, the investigator observes that the monitor of the computer is displaying a screensaver, which is obscuring any active programs or open files. The forensic team is under pressure to preserve the integrity of the evidence without modifying or tampering with any data on the machine.
The investigator needs to capture a clear image of the programs running on the screen to document the evidence properly. However, they are uncertain about how to proceed in this situation to avoid potentially altering any information on the computer. What should the investigator do to capture the active programs on the screen and document the evidence effectively?
- Printable Format
- Value of Money
- 100% Pass Assurance
- Verified Answers
- Researched by Industry Experts
- Based on Real Exams Scenarios
- 100% Real Questions
