nerdexam
CiscoCisco

200-201 · Question #163

200-201 Question #163: Real Exam Question with Answer & Explanation

Sign in or unlock 200-201 to reveal the answer and full explanation for question #163. The question stem and answer options stay visible for context.

Submitted by rachelw· Mar 6, 2026Host-Based Analysis

Question

A forensic investigator is analyzing a recent breach case. An external USB drive was discovered to be connected and transmitting the data outside of the organization, and the owner of the USB drive could not be identified. Video surveillance shows six people during a two-month period had close contact with the affected asset. How must this type of evidence be categorized?

Options

  • Abest evidence
  • Bindirect evidence
  • Cdirect evidence
  • Dcorroborative evidence

Unlock 200-201 to see the answer

You've previewed enough free 200-201 questions. Unlock 200-201 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#forensic evidence#indirect evidence#digital forensics#breach investigation
Full 200-201 PracticeBrowse All 200-201 Questions