What Should Be the FIRST Action to Protect the Chain

question 122

Multiple Choice

What should be the FIRST action to protect the chain of evidence when a desktop computer is involved?

• A) Take the computer to a forensic lab
• B) Make a copy of the hard drive
• C) Start documenting
• D) Turn off the computer

---

Definitions:

Zero-balance Account

A type of bank account that maintains a balance of zero by automatically transferring funds from a master account in amounts only large enough to cover checks presented.

Surplus Cash

Excess cash that a company holds over and above the minimum operational funds required, often used for investment, dividends, or buybacks.

Lockbox System

A service offered by banks to companies for the collection of payments from customers, wherein the payments are sent directly to a post office box, thereby speeding up collection times.

Processing Time

The amount of time required to complete a specific process or task, often related to manufacturing or computational operations.