nerdexam
CiscoCisco

200-201 · Question #544

200-201 Question #544: Real Exam Question with Answer & Explanation

Sign in or unlock 200-201 to reveal the answer and full explanation for question #544. The question stem and answer options stay visible for context.

Submitted by thandi_sa· Mar 6, 2026Security Policies and Procedures

Question

While analyzing the process of a recent breach case, a forensic investigator determined that an external USB drive was connected to the laptop of the HR manager and personal data of employees was exfiltrated to an external source. Video surveillance showed a stranger giving this USB drive to an HR manager during a job interview. How must this type of evidence be categorized?

Options

  • Abest evidence
  • Bdirect evidence
  • Cindirect evidence
  • Dcorroborative evidence

Unlock 200-201 to see the answer

You've previewed enough free 200-201 questions. Unlock 200-201 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Digital forensics#Evidence categories#Incident response#Data exfiltration
Full 200-201 PracticeBrowse All 200-201 Questions