CompTIACompTIA
220-1102 · Question #408
220-1102 Question #408: Real Exam Question with Answer & Explanation
Sign in or unlock 220-1102 to reveal the answer and full explanation for question #408. The question stem and answer options stay visible for context.
Security
Question
An administrator responded to an incident where an employee copied financial data to a portable hard drive and then left the company with the data. The administrator documented the movement of the evidence. Which of the following concepts did the administrator demonstrate?
Options
- APreserving chain of custody
- BImplementing data protection policies
- CInforming law enforcement
- DCreating a summary of the incident
Unlock 220-1102 to see the answer
You've previewed enough free 220-1102 questions. Unlock 220-1102 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Incident Response#Chain of Custody#Evidence Handling#Digital Forensics