Computer Hacking Forensic Investigator (CHFI) — Question 107

Why should you note all cable connections for a computer you want to seize as evidence?

Answer options

• A. to know what outside connections existed
• B. in case other devices were connected
• C. to know what peripheral devices exist
• D. to know what hardware existed

Correct answer: A

Explanation

The correct answer is A because documenting outside connections helps establish the context and potential data sources involved in a case. Options B, C, and D are incorrect as they focus on internal devices and peripherals rather than the critical external connections relevant for evidence collection.