Which of the following will the incident handler MOST likely do to preserve the evidence?

An incident handler needs to preserve evidence for possible litigation.

Which of the following will the incident handler MOST likely do to preserve the evidence?
A . Encrypt the files
B. Clone any impacted hard drives
C. Contact the cyber insurance company
D. Inform law enforcement

Answer: B

Explanation:

The incident handler should clone any impacted hard drives to preserve evidence for possible litigation1

Latest 220-1102 Dumps Valid Version with 81 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments