A technician working on a computer discovers what is suspected to be illegal activity. Which three pieces of information should be immediately documented? (Choose three.)
- duration of the suspected illegal activity
- evidence of the suspected illegal activity
- why the computer was accessed by the technician
- details of all past users of the computer
- technical specifications of the computer
- location of the computer
| Explanation & Hint:
The initial reason for accessing the computer, the suspected illegal matter or operations, and the location of the computer are immediately apparent to the technician and should be among the first details documented. Details of past computer users and the duration of the illegal activity are matters that the appropriate investigators will determine. The technical specifications of the computer may have little relevance to its illegal use. |