Computer Forensics Investigation Process
5 practice questions under this official exam objective (312-49v10) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
What Is the First Step When Searching a Cybercrime Scene for Evidence?
When a CHFI spots a GPS device, keyboard, and caller ID box during the initial scene search, the correct first action is to record observations about
EnCase Evidence Integrity Mechanism
This question addresses how EnCase ensures digital evidence integrity during acquisition. The correct mechanism relies on cryptographic hashing to det
Which Item Is NOT Considered Physical Evidence?
Physical evidence in computer forensics means tangible objects that can be seized, handled and preserved with a chain of custody. This page confirms t
Which MySQL Utility Recovers a MyISAM Log File?
MySQL's myisamlog utility processes MyISAM log file contents and can perform recovery operations on that log. This page confirms that myisamlog, not m
What is NOT Part of the Pre-Investigation Phase?
The pre-investigation phase of a computer forensics investigation focuses entirely on preparation and planning. This page establishes that gathering e