List of questions
Related questions
Question 120 - CAS-004 discussion
Immediately following the report of a potential breach, a security engineer creates a forensic image of the server in question as part of the organization incident response procedure. Which of the must occur to ensure the integrity of the image?
A.
The image must be password protected against changes.
B.
A hash value of the image must be computed.
C.
The disk containing the image must be placed in a seated container.
D.
A duplicate copy of the image must be maintained
Your answer:
0 comments
Sorted by
Leave a comment first