nerdexam
EC-Council

312-49V9 · Question #496

An executive has leaked the company trade secrets through an external drive. What process should the investigation team take if they could retrieve his system?

The correct answer is A. Postmortem Analysis. See the full explanation below for the reasoning.

Question

An executive has leaked the company trade secrets through an external drive. What process should the investigation team take if they could retrieve his system?

Options

  • APostmortem Analysis
  • BReal-Time Analysis
  • CPacket Analysis
  • DMalware Analysis

How the community answered

(29 responses)
  • A
    76% (22)
  • B
    14% (4)
  • C
    7% (2)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full 312-49V9 Practice