When Performing a Static Acquisition, What Should Be Done After

question 14

Multiple Choice

When performing a static acquisition, what should be done after the hardware on a suspect's computer has been inventoried and documented?​

• A)​Inventory and documentation information should be stored on a drive and then the drive should be reformatted.
• B)​Start the suspect's computer and begin collecting evidence.
• C) The hard drive should be removed, if practical, and the system's date and time values should be recorded from the system's CMOS.​
• D)Connect the suspect's computer to the local network so that up to date forensics utilities can be utilized.

---

Definitions:

Reliability of the Product

The likelihood that a product will perform its intended function under specified conditions without failure over a given period of time.

First Purchase

The initial act of buying a product or service by a customer, often seen as a critical step in building customer loyalty and repeat business.

Promotion-to-Sales Ratio

A metric comparing the amount spent on marketing and promotion to the total sales revenue generated, often used to assess marketing efficiency.

Total Promotion Expenditures

The aggregate amount of money a company spends on all promotional activities, including advertising, sales promotions, public relations, and personal selling, over a set period.