Eccouncil Exam 212-89 Topic 4 Question 51 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 51
Topic #: 4

According to the Evidence Preservation policy, a forensic investigator should make at least ..................... image copies of the digital evidence.

AOne image copy

BTwo image copies

CThree image copies

DFour image copies

Show Suggested Answer

Suggested Answer: B

by Ty at Mar 09, 2024, 02:39 AM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arlene

9 months ago

I agree with Latrice, three copies would provide extra protection in case of errors during imaging.

upvoted 0 times

...

Val

9 months ago

But wouldn't two copies be enough to ensure preservation of evidence?

upvoted 0 times

...

Latrice

9 months ago

I believe it's three image copies to be safe.

upvoted 0 times

...

Val

9 months ago

I think the answer is two image copies.

upvoted 0 times

...

Lashaunda

9 months ago

In my opinion, sticking to the policy and making two image copies is the best practice.

upvoted 0 times

...

Jolene

10 months ago

Making multiple image copies can also increase the chances of accidental alteration of the evidence.

upvoted 0 times

...

Lashawnda

10 months ago

I personally feel that two image copies are sufficient as per the Evidence Preservation policy.

upvoted 0 times

...

Graciela

10 months ago

Some may argue that making three image copies is better for redundancy and safety.

upvoted 0 times

...

Monte

10 months ago

I agree, having two image copies ensures proper preservation of the digital evidence.

upvoted 0 times

...

Cecil

11 months ago

I think the answer is two image copies. It helps in case one copy gets corrupted.

upvoted 0 times

...