CompTIA Network+ N10-006 Q502

Which of the following should a first responder perform when arriving at a site to perform a basic forensic investigation?

A. Isolate the area and block radio transmissions to the device.
B. Search for hidden storage devices and duplicate them on site.
C. Power off all computers and devices to stop them from erasing data.
D. Utilize a strong magnet to secure all data on drives from being erased.

Correct Answer: B