EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 2 : Computer Forensics Investigation Process
         
Questions available : 60 You are not logged in.
Please Login for track your learning progress
   
 
Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
Go to Question No.



Question No 0

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.
 
   
Bookmark this Question
QID: 810  
   
Which is a standard procedure to perform during all computer forensics investigations?


 
A:    with the hard drive removed from the suspect PC, check the date and time in the system‘s CMOS
  
B:    with the hard drive in the suspect PC, check the date and time in the File Allocation Table
C:    with the hard drive removed from the suspect PC, check the date and time in the system‘s RAM
  
D:    with the hard drive in the suspect PC, check the date and time in the system‘s CMOS
 
         

 
 

Diffence opinion in Correct Answer or any comment?
Vote / Comment for correct Answer



Comunity Comments:

Chhavi Kaushik on 20/05/2024
Opted Answer: A
A seems to be correct.
0 
0 

Krishna on 03/05/2024
Opted Answer: D
Option D seems to be a more practical approach and will not alter the timestamp on har disk.
0 
1 

Pradeep Thomas on 21/03/2024
Even though hard disc removed from computer nothing will happen to the information which is stored in system‘s CMOS. So better remove the disk first, then switch on the system to check the date in CMOS. So option A will be more appropriate answer.
1 
0 

















WELCOME TO ONLINE EXAM PREPARATION SYSTEM

Certification Examinations