If a destructive program is running that might be destroying evidence what should be done

Question

Computers & Technology

Lindsay Pena

7 August, 21:17

If a destructive program is running that might be destroying evidence what should be done

+1

Answers (1)

Know the Answer?

Brenton Durham · Answer 1

The choices can be found elsewhere and as follows:

a. perform an immediate full backup

b. attempt to end the process

c. pull the power cable

d. record the destruction using a video capture of the screen

I think the correct answer is option a. If a destructive program is running that might be destroying evidence, then perform an immediate full backup.