ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 69 - 220-1102 discussion

Report
Export

An incident handler needs to preserve evidence for possible litigation. Which of the following will the incident handler MOST likely do to preserve the evidence?

A.
Encrypt the files
Answers
A.
Encrypt the files
B.
Clone any impacted hard drives
Answers
B.
Clone any impacted hard drives
C.
Contact the cyber insurance company
Answers
C.
Contact the cyber insurance company
D.
Inform law enforcement
Answers
D.
Inform law enforcement
Suggested answer: B

Explanation:

The incident handler should clone any impacted hard drives to preserve evidence for possible litigation1

asked 02/10/2024
Vilfride Lutumba
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first