Question

which of the following represents known files you can eliminate from an investigation? (choose all that apply.)
□ a. any graphics files
□ b. files associated with an application
□ c. system files the os uses
□ d. any files pertaining to the company

Explanation:

• Graphics files might be relevant evidence (e.g., containing case-related data), so they can't be universally eliminated.
• Application-associated files that are known, standard, and unrelated to the investigation can be ruled out, as they don't hold investigative value.
• Standard OS system files with no ties to the incident are known, non-relevant files that can be eliminated from the investigation scope.
• Company-related files could include critical evidence (e.g., internal communications, records tied to the case), so they can't all be eliminated.

Answer:

b. Files associated with an application
c. System files the OS uses