ExamGecko
Search Search Login
Home Home / CompTIA / 220-1102
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

A systems administrator is setting up a Windows computer for a new user Corporate policy requires a least privilege environment. The user will need to access advanced features and configuration settings for several applications. Which of the following BEST describes the account access level the user will need?
A technician installed a known-good, compatible motherboard on a new laptop. However, the motherboard is not working on the laptop. Which of the following should the technician MOST likely have done to prevent damage?
A change advisory board did not approve a requested change due to the lack of alternative actions if implementation failed. Which of the following should be updated before requesting approval again?
A user reports a PC is running slowly. The technician suspects it has a badly fragmented hard drive. Which of the following tools should the technician use?
A technician is troubleshooting an issue involving programs on a Windows 10 machine that are loading on startup but causing excessive boot times. Which of the following should the technician do to selectively prevent programs from loading?
Which of the following is the MOST cost-effective version of Windows 10 that allows remote access through Remote Desktop?
A technician is setting up a new laptop for an employee who travels, Which of the following is the BEST security practice for this scenario?
Which of the following must be maintained throughout the forensic evidence life cycle when dealing with a piece of evidence?
The Chief Executive Officer at a bark recently saw a news report about a high-profile cybercrime where a remote-access tool that the bank uses for support was also used in this crime. The report stated that attackers were able to brute force passwords to access systems. Which of the following would BEST limit the bark's risk? (Select TWO)
A change advisory board just approved a change request. Which of the following is the MOST likely next step in the change process?

Question 575 - 220-1102 discussion

Report
Export

A technician receives a high-priority ticket about sensitive information collected from an end user's workstation. Which of the following steps should a technician take to preserve the chain of custody for a forensic investigation?

A.
Reimage the workstation.
Answers
A.
Reimage the workstation.
B.
Inform the user of the investigation.
Answers
B.
Inform the user of the investigation.
C.
Recover and secure the workstation.
Answers
C.
Recover and secure the workstation.
D.
Back up the workstation
Answers
D.
Back up the workstation
Suggested answer: C

Explanation:

In the context of a forensic investigation, especially involving sensitive information, preserving the integrity and the chain of custody of the potential evidence is crucial. The step to 'Recover and secure the workstation' involves physically securing the workstation to prevent any unauthorized access and logically securing the data by ensuring that no changes are made to the system or files. This step helps maintain the original state of the workstation, which is essential for a legitimate forensic analysis and ensuring that the evidence is admissible in legal proceedings.

Show Answer
asked 02/10/2024
Kees den Dekker
43 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms