What should be the FIRST action to protect the chain of evidence when a desktop computer is involved?

What should be the FIRST action to protect the chain of evidence when a desktop computer is involved?
A . Take the computer to a forensic lab
B . Make a copy of the hard drive
C . Start documenting
D . Turn off the computer

Answer: C

Latest CISSP Dumps Valid Version with 981 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments