Eccouncil Exam ECSS Topic 4 Question 97 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 97
Topic #: 4

[All ECSS Questions]

Below are the various steps involved in an email crime investigation.

1.Acquiring the email data

2.Analyzing email headers

3.Examining email messages

4.Recovering deleted email messages

5.Seizing the computer and email accounts

6.Retrieving email headers

What is the correct sequence of steps involved in the investigation of an email crime?

A5->l->3->6-->2 >4

B2->4->3-->6->5-->l

C1--->3->4--->2-->5'>6

D5 -> 1 -> 6 -> 2 -> 3 -> 4

Show Suggested Answer

Suggested Answer: D

Seizing the computer and email accounts (Step 5): This is the initial step to secure potential evidence. It involves physically or remotely seizing the suspect's computer and email accounts to prevent tampering.

Acquiring the email data (Step 1): After seizing the devices, investigators acquire the email data. This includes collecting email files, attachments, and metadata.

Retrieving email headers (Step 6): Email headers contain valuable information such as sender IP addresses, timestamps, and routing details. Retrieving headers helps trace the email's origin.

Analyzing email headers (Step 2): Investigators analyze the headers to identify any anomalies, spoofing, or suspicious patterns.

Examining email messages (Step 3): Investigators review the actual email content, attachments, and any embedded links. This step helps understand the context and intent.

Recovering deleted email messages (Step 4): Deleted emails may contain critical evidence. Investigators use specialized tools to recover deleted messages.

EC-Council Certified Security Specialist (E|CSS) documents and study guide.

EC-Council Certified Security Specialist (E|CSS) course materials123

by Merlyn at Nov 17, 2024, 03:06 PM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ellsworth

20 days ago

Wait, wait, wait... do we really need to seize the computer? Can't we just hack into it from our phones and call it a day? Oh, wait, that's probably not legal. My bad.

upvoted 0 times

...

Mira

21 days ago

Hmm, this is a tricky one. I'm gonna go with B) 2->4->3-->6->5-->l. After all, what's an email investigation without a little bit of recovering deleted emails?

upvoted 0 times

Nohemi

4 days ago

I agree, those steps are definitely important. But I think the correct sequence is actually D) 5 -> 1 -> 6 -> 2 -> 3 -> 4. Seizing the computer and email accounts should come before analyzing email headers.

upvoted 0 times

...

Ollie

7 days ago

I think you're on the right track with B) 2->4->3-->6->5-->1. Analyzing email headers and recovering deleted emails are crucial steps in the investigation.

upvoted 0 times

...

Vi

1 months ago

I'm pretty sure the correct sequence is 5 -> 1 -> 6 -> 2 -> 3 -> 4. But hey, who needs evidence when you've got a hunch, am I right?

upvoted 0 times

...

Francine

1 months ago

I'm not sure, but I think C) 1--->3->4--->2-->5-->6 could also be a possible sequence.

upvoted 0 times

...

Kent

1 months ago

I agree with Marge, D) seems to be the most logical sequence for an email crime investigation.

upvoted 0 times

...

Olene

1 months ago

Let's see, you gotta seize the computer first, then dig through the headers, and finally recover those sneaky deleted messages. Sounds like a classic detective novel in the making!

upvoted 0 times

Margarett

4 days ago

Finally, recover the deleted messages.

upvoted 0 times

...

Marget

14 days ago

Then analyze the email headers.

upvoted 0 times

...

Titus

26 days ago

Seize the computer first.

upvoted 0 times

...

Derick

26 days ago

C) 1--->3->4--->2-->5-->6

upvoted 0 times

...

Zack

1 months ago

B) 2->4->3-->6->5-->l

upvoted 0 times

...

Willow

1 months ago

A) 5->l->3->6-->2 >4

upvoted 0 times

...

Selma

2 months ago

Ah, the old email crime investigation shuffle! Gotta make sure you get all the steps in the right order, or the whole case falls apart like a house of digital cards.

upvoted 0 times