CompTIA
CAS-002 · Question #663
CAS-002 Question #663: Real Exam Question with Answer & Explanation
Sign in or unlock CAS-002 to reveal the answer and full explanation for question #663. The question stem and answer options stay visible for context.
Question
A production server has been compromised. Which of the following is the BEST way to preserve the non-volatile evidence?
Options
- AShut the server down and image the hard drive.
- BRemove all power sources from the server.
- CInstall remote backup software and copy data to write-once media.
- DLogin remotely and perform a full backup of the server.
Unlock CAS-002 to see the answer
You've previewed enough free CAS-002 questions. Unlock CAS-002 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.