A forensic investigator discovers an Android smartwatch at the crime scene during an investigation. The investigator realizes the smartwatch was potentially involved in the crime, but the device associated with it was not found at the scene. What is the most suitable initial step for the investigator to retrieve meaningful data from the smartwatch?

A. The investigator should first physically dismantle the smartwatch to access its internal storage

B. The investigator should immediately turn off the smartwatch to prevent data manipulation

C. The investigator should start by understanding the smartwatch’s basic framework, including its APIs

D. The investigator should directly analyze data stored on the smartwatch using IoT forensics tools








 

Suggested Answer: C

Community Answer: C



This question is in 312-49V10 EC-Council Computer Hacking Forensic Investigator (CHFI) v10 Exam
For getting EC-Council Computer Hacking Forensic Investigator (CHFI) Certificate







Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council. 
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exams.