When Performing a Static Acquisition, What Should Be Done After

question 14

Multiple Choice

When performing a static acquisition, what should be done after the hardware on a suspect's computer has been inventoried and documented?​

• A)​Inventory and documentation information should be stored on a drive and then the drive should be reformatted.
• B)​Start the suspect's computer and begin collecting evidence.
• C) The hard drive should be removed, if practical, and the system's date and time values should be recorded from the system's CMOS.​
• D)Connect the suspect's computer to the local network so that up to date forensics utilities can be utilized.

---

Definitions:

Cognitive Appraisal

The process of evaluating and interpreting an event or situation that leads to an emotional response.

Split-Second Fear

A rapid, automatic fear response to a perceived threat, occurring in a fraction of a second.

Unconscious

Pertaining to the part of the mind that is inaccessible to the conscious mind but influences behaviors, thoughts, and feelings.

Neural Processing

The method by which the nervous system receives, interprets, and responds to signals from the sensory organs or other neural inputs.