اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 954 من 1040

كل الأسئلة

Which of the following is a reason proper handling and reporting of existing evidence are important for the investigation and reporting phases of an incident response?

الخيارات

  • A To ensure the report is legally acceptable in case it needs to be presented in court
  • B To present a lessons-learned analysis for the incident response team
  • C To ensure the evidence can be used in a postmortem analysis
  • D To prevent the possible loss of a data source for further root cause analysis

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.