nerdexam
Cisco

600-199 · Question #53

As a part of incident response, which action should be performed?

The correct answer is C. maintain data security and custody for future forensics use. See the full explanation below for the reasoning.

Question

As a part of incident response, which action should be performed?

Options

  • Awatch to see if the incident reoccurs
  • Bcustody of information
  • Cmaintain data security and custody for future forensics use
  • Dclassify the problem

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    18% (6)
  • C
    71% (24)
  • D
    9% (3)

Community Discussion

No community discussion yet for this question.

Full 600-199 Practice