CompTIA
CAS-002 · Question #837
CAS-002 Question #837: Real Exam Question with Answer & Explanation
Sign in or unlock CAS-002 to reveal the answer and full explanation for question #837. The question stem and answer options stay visible for context.
Question
During an incident involving the company main database, a team of forensics experts is hired to respond to the breach. The team is in charge of collecting forensics evidence from the company's database server. Which of the following is the correct order in which the forensics team should engage?
Options
- ANotify senior management, secure the scene, capture volatile storage, capture non-volatile
- BTake inventory, secure the scene, capture RAM, capture had drive, implement chain of custody,
- CImplement chain of custody, take inventory, secure the scene, capture volatile and non-volatile
- DSecure the scene, take inventory, capture volatile storage, capture non-volatile storage,
Unlock CAS-002 to see the answer
You've previewed enough free CAS-002 questions. Unlock CAS-002 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.