Computer Hacking Forensic Investigator (CHFI v10) — Question 364

A Computer Hacking Forensic Investigator (CHFI) arrives at the crime scene in an incident involving cybercrime. While performing the initial search of the scene, the investigator spots a GPS device, a keyboard, and a telephone line connected to a caller ID box. Considering the steps involved in searching for evidence, which of the following actions should the investigator perform first?

Answer options

• A. Secure the keyboard to protect any potential fingerprints
• B. Initiate the search and seizure evidence log to document details of the identified devices
• C. Record observations about the current situation at the scene
• D. Survey the GPS device to explore potential sources of digital information

Correct answer: A

Explanation

The correct answer is A because securing the keyboard is crucial to prevent the loss of potential fingerprints that could be vital evidence. Options B and C, while important, come after ensuring that physical evidence is not compromised. Option D focuses on examining a device rather than securing crucial evidence first.