Câu 78: GCFA: GIAC Certified Forensic Analyst

Adam works as a professional Computer Hacking Forensic Investigator with the local police of his area. A project has been assigned to him to investigate a PDA seized from a local drug dealer. It is expected that many valuable and important information are stored in this PDA. Adam follows investigative methods, which are required to perform in a pre-defined sequential manner for the successful forensic investigation of the PDA. Which of the following is the correct order to perform forensic investigation of PDA?

1. A. Identification, Collection, Examination, Documentation
2. B. Examination, Collection, Identification, Documentation
3. C. Documentation, Examination, Identification, Collection
4. D. Examination, Identification, Collection, Documentation — đáp án hiện tại