A computer used for investigation must be __________ and interconnected with no other computers.

A computer used for investigation must be __________ and interconnected with no other computers.

• A. Portable
• B. Standalone
• C. Multi-platform
• D. Networked

Answer: (B)

The correct answer is that a computer used for investigation must be standalone. A standalone computer is not connected to any other devices or networks, which minimizes the risk of data tampering, unauthorized access, or contamination of evidence during the investigative process. By isolating the machine, investigators ensure that the integrity of the data is maintained, allowing for a more reliable analysis. In the context of digital investigations, using a standalone system is essential for maintaining chain of custody and protecting sensitive information. This isolation helps prevent external interference and ensures that forensic processes can be carried out without interference from malware or other vulnerabilities that might exist on networked systems. The other choices suggest attributes that do not align with the requirements for forensic investigations. For example, a portable computer could potentially be used in a variety of environments, but its mobility may introduce risks related to unauthorized access. Multi-platform capability implies connectivity to various systems, which could compromise the integrity of the investigation. A networked computer, by definition, remains connected to other machines, increasing potential security risks and complicating the investigative process.

The correct answer is that a computer used for investigation must be standalone. A standalone computer is not connected to any other devices or networks, which minimizes the risk of data tampering, unauthorized access, or contamination of evidence during the investigative process. By isolating the machine, investigators ensure that the integrity of the data is maintained, allowing for a more reliable analysis.

In the context of digital investigations, using a standalone system is essential for maintaining chain of custody and protecting sensitive information. This isolation helps prevent external interference and ensures that forensic processes can be carried out without interference from malware or other vulnerabilities that might exist on networked systems.

The other choices suggest attributes that do not align with the requirements for forensic investigations. For example, a portable computer could potentially be used in a variety of environments, but its mobility may introduce risks related to unauthorized access. Multi-platform capability implies connectivity to various systems, which could compromise the integrity of the investigation. A networked computer, by definition, remains connected to other machines, increasing potential security risks and complicating the investigative process.