اضغط هنا للانضمام الى قروب فوجي للإختبارات على تيليقرام

اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 632 من 1040

كل الأسئلة

An employee is suspected of misusing a company-issued laptop. The employee has been suspended pending an investigation by human resources. Which of the following is the best step to preserve evidence?

الخيارات

  • A Disable the user's network account and access to web resources
  • B Make a copy of the files as a backup on the server
  • C Place a legal hold on the device and the user's network share
  • D Make a forensic image of the device and create a SRA-I hash

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.