Eccouncil Exam ECSS Topic 4 Question 97 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 97
Topic #: 4

[All ECSS Questions]

Below are the various steps involved in an email crime investigation.

1.Acquiring the email data

2.Analyzing email headers

3.Examining email messages

4.Recovering deleted email messages

5.Seizing the computer and email accounts

6.Retrieving email headers

What is the correct sequence of steps involved in the investigation of an email crime?

A5->l->3->6-->2 >4

B2->4->3-->6->5-->l

C1--->3->4--->2-->5'>6

D5 -> 1 -> 6 -> 2 -> 3 -> 4

Show Suggested Answer

Suggested Answer: D

Seizing the computer and email accounts (Step 5): This is the initial step to secure potential evidence. It involves physically or remotely seizing the suspect's computer and email accounts to prevent tampering.

Acquiring the email data (Step 1): After seizing the devices, investigators acquire the email data. This includes collecting email files, attachments, and metadata.

Retrieving email headers (Step 6): Email headers contain valuable information such as sender IP addresses, timestamps, and routing details. Retrieving headers helps trace the email's origin.

Analyzing email headers (Step 2): Investigators analyze the headers to identify any anomalies, spoofing, or suspicious patterns.

Examining email messages (Step 3): Investigators review the actual email content, attachments, and any embedded links. This step helps understand the context and intent.

Recovering deleted email messages (Step 4): Deleted emails may contain critical evidence. Investigators use specialized tools to recover deleted messages.

EC-Council Certified Security Specialist (E|CSS) documents and study guide.

EC-Council Certified Security Specialist (E|CSS) course materials123

by Merlyn at Nov 17, 2024, 03:06 PM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vi

2 days ago

I'm pretty sure the correct sequence is 5 -> 1 -> 6 -> 2 -> 3 -> 4. But hey, who needs evidence when you've got a hunch, am I right?

upvoted 0 times

...

Francine

7 days ago

I'm not sure, but I think C) 1--->3->4--->2-->5-->6 could also be a possible sequence.

upvoted 0 times

...

Kent

8 days ago

I agree with Marge, D) seems to be the most logical sequence for an email crime investigation.

upvoted 0 times

...

Olene

9 days ago

Let's see, you gotta seize the computer first, then dig through the headers, and finally recover those sneaky deleted messages. Sounds like a classic detective novel in the making!

upvoted 0 times

Willow

23 hours ago

A) 5->l->3->6-->2 >4

upvoted 0 times

...

Selma

19 days ago

Ah, the old email crime investigation shuffle! Gotta make sure you get all the steps in the right order, or the whole case falls apart like a house of digital cards.

upvoted 0 times