Cisco
600-199 · Question #1
Which describes the best method for preserving the chain of evidence?
The correct answer is C. Identify the infected machine, disconnect from the network, and contact the local authorities. See the full explanation below for the reasoning.
Question
Which describes the best method for preserving the chain of evidence?
Options
- AShut down the machine that is infected, remove the hard drive, and contact the local authorities.
- BBack up the hard drive, use antivirus software to clean the infected machine, and contact the local
- CIdentify the infected machine, disconnect from the network, and contact the local authorities.
- DAllow user(s) to perform any business-critical tasks while waiting for local authorities.
How the community answered
(47 responses)- A2% (1)
- B11% (5)
- C81% (38)
- D6% (3)
Community Discussion
No community discussion yet for this question.