When starting an investigation which of the following must b - CompTIA CySA+ CSO-003

Question

When starting an investigation, which of the following must be done first?

Answers
  1. correct
Explanation

Correct Answer: B. Secure the scene

Securing the scene is the critical first step in any investigation. This ensures that the area where the incident occurred is protected from contamination, tampering, or destruction of evidence. By securing the scene, investigators can preserve the integrity of all potential evidence for later analysis.

This includes preventing unauthorized individuals from entering or disturbing the scene, which helps ensure that the investigation is conducted properly and that no evidence is lost or altered.

Why the Other Options Are Incorrect:
Notify law enforcement

While it is important to notify law enforcement if the situation warrants, this typically occurs after securing the scene. The investigation cannot proceed properly if the scene itself has not been secured, as evidence could be tampered with before law enforcement arrives.

Law enforcement may need to be notified, but securing the scene is always the first priority to ensure evidence is preserved.

Seize all related evidence

Seizing evidence is a crucial step in an investigation, but it should only occur after the scene has been secured. If evidence is collected before securing the scene, it could be contaminated, misplaced, or unintentionally altered. Securing the scene is the first step to ensure that evidence is not lost or compromised during the process of seizure.

Interview the witnesses

Interviewing witnesses is an essential part of the investigation, but it should come after securing the scene and gathering physical evidence. If witnesses are interviewed before securing the scene, they might unintentionally contaminate or alter the facts based on what they see or hear from others. The scene must be secured first to ensure that the investigation is conducted in a controlled and unbiased manner.

No Payment Cards Needed

Related Courses

Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.

a prepsaret exam featured image
CompTIA Prep

220-1201 - CompTIA A+ Exam Core 1

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

220-1202 - CompTIA A+ Exam Core 2

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA SecurityX CAS-005

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Cloud Essentials+ CLO-002

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Network+ N10-009

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Security+ SY0-701

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Data + DA0-001

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Pentest+

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Linux+ XK0-005

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA DataSys+ DS0-001

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Tech+ FC0-U71

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Cloud+ CV0-004

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Server+ SK0-005

Start Course Prep

Easy way to pass your test within a week with prepsaret

You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams

View Courses Offered