Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


What should a forensic team member not do during preliminary interviews?

  1. Ask controlled questions to the suspect

  2. Never ask any questions to the suspect

  3. Record statements of witnesses

  4. Document the suspect's demeanor

The correct answer is: Never ask any questions to the suspect

During preliminary interviews, it is critical for a forensic team member to gather valuable information in a structured manner. While many activities can be beneficial in the investigative process, asking no questions at all would result in a missed opportunity to collect essential details regarding the case. Engaging with the suspect through interview questions is vital, as it allows the investigator to gain insights, clarify narratives, and begin assessing the suspect's credibility. Controlled questions can help guide the conversation and ensure that the interview stays focused. Recording witness statements and documenting the suspect’s demeanor also contribute to building a comprehensive understanding of the overall situation. In contrast, avoiding any inquiries altogether would severely compromise the effectiveness of the investigative process and could hinder the team's ability to build a clear picture of the events in question.