CISSP Question of the Week courtesy of Transcender Labs.
As a part of the incident response team, you are given a procedures document that identifies the steps you must complete during a forensic investigation.
After which event should you complete the evidence collection step?
A. The incident is identified only.
B. The evidence is preserved only.
C. The incident is identified and the evidence has been preserved.
D. The incident is identified, the evidence is preserved and the evidence is analyzed.
Related Course
CISSP Certification Prep Course
CISSP Question of the Week Series
- CISSP Question of the Week: Pillar of Basel II
- CISSP Question of the Week: Implement Redundant Servers
- CISSP Question of the Week: Terrorist Attacks
- CISSP Question of the Week: Customer Credit Card Information
- CISSP Question of the Week: Complex Instruction Set Computers
- CISSP Question of the Week: Asymmetric Encryption
- CISSP Question of the Week: OSI Layer for Formatting Data
- CISSP Question of the Week: Secure Communications
- CISSP Question of the Week: Biometric System and Fingerprinting Technology
- CISSP Question of the Week: Security Management Life Cycle
- CISSP Question of the Week: Anomaly-based Monitoring
- CISSP Question of the Week: Forensic Investigation
Please support our Sponsors here :