Computer forensics is methodical series of techniques and procedures for gathering evidence from computing equipment, various storage devices and or digital media that can be presented in a course of law in a coherent and meaningful format. Which one of the following is an appropriate flow of steps in the computer forensics process:

A. Examination> Analysis > Preparation > Collection > Reporting

B. Preparation > Analysis > Collection > Examination > Reporting

C. Analysis > Preparation > Collection > Reporting > Examination

D. Preparation > Collection > Examination > Analysis > Reporting








 

Suggested Answer: D





This question is in 212-89 EC-Council Certified Incident Handler Exam
For getting EC-Council Certified Incident Handler (ECIH)








Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council. 
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exams.