What should be the FIRST action to protect the chain of evidence when a desktop computer is involved?
A . Take the computer to a forensic lab
B . Make a copy of the hard drive
C . Start documenting
D . Turn off the computer
Answer: C
Latest CISSP Dumps Valid Version with 981 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund