اضغط هنا للانضمام الى قروب فوجي للإختبارات على تيليقرام

اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 927 من 1040

كل الأسئلة

An employee is suspected of misusing a company-issued laptop. The employee has been suspended pending an investigation by human resources. Which of the following is the best step to preserve evidence?

الخيارات

  • A Disable the user's network account and access to web resources.
  • B Make a copy of the files as a backup on the server.
  • C Place a legal hold on the device and the user's network share.
  • D Make a forensic image of the device and create a SHA-1 hash.

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.