During a Forensic Investigation, Which of the Following Must Be

question 965

Multiple Choice

During a forensic investigation, which of the following must be addressed FIRST according to the order of volatility?

• A) Hard drive
• B) RAM
• C) Network attached storage
• D) USB flash drive

---

Definitions:

Parent Entity

A company that holds a controlling interest in another company or companies, usually through majority ownership of shares.

Intragroup Transaction

Intragroup transactions refer to transactions between entities within the same group, such as sales, services, or financing activities, which are usually eliminated in consolidated financial statements.

Realised Profit

Profit that has been actually earned and received, typically from the sale of goods, services, or assets.