Computer Hacking Forensic Investigator (CHFI v10) — Question 517

Which of the following tasks DOES NOT come under the investigation phase of a cybercrime forensics investigation case?

Answer options

• A. Data collection
• B. Secure the evidence
• C. First response
• D. Data analysis

Correct answer: C

Explanation

The correct answer is C, as the initial response is typically considered a preliminary step before the investigation phase begins. Data collection, securing evidence, and data analysis are all integral parts of the investigation process in cybercrime forensics.