اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 1001 من 1040

كل الأسئلة

An employee is suspected of misusing a company-issued laptop and has been suspended pending an HR investigation. What is the best step to preserve evidence?

الخيارات

  • A Disable the user's network account and web access
  • B Make a copy of the files as a backup on the server
  • C Place a legal hold on the device and the user's network share
  • D Make a forensic image of the device and create a SHA-1 hash

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.