CAS-003 · Question #187
A user is suspected of engaging in potentially illegal activities. Law enforcement has requested that the user continue to operate on the network as normal. However, they would like to have a copy…
The correct answer is C. Place a legal hold on the user's email account. Next, perform e-discovery searches to collect. A legal hold is a process that an organization uses to maintain all forms of pertinent information when legal action is reasonably expected. E-discovery refers to discovery in litigation or government investigations that manages the exchange of electronically stored information…
Question
A user is suspected of engaging in potentially illegal activities. Law enforcement has requested that the user continue to operate on the network as normal. However, they would like to have a copy of any communications from the user involving certain key terms. Additionally, the law enforcement agency has requested that the user's ongoing communication be retained in the user's account for future investigations. Which of the following will BEST meet the goals of law enforcement?
Options
- ABegin a chain-of-custody on for the user's communication. Next, place a legal hold on the user's
- BPerform an e-discover using the applicable search terms. Next, back up the user's email for a
- CPlace a legal hold on the user's email account. Next, perform e-discovery searches to collect
- DPerform a back up of the user's email account. Next, export the applicable emails that match the
How the community answered
(39 responses)- A8% (3)
- B15% (6)
- C74% (29)
- D3% (1)
Explanation
A legal hold is a process that an organization uses to maintain all forms of pertinent information when legal action is reasonably expected. E-discovery refers to discovery in litigation or government investigations that manages the exchange of electronically stored information (ESI). ESI includes email and office documents, photos, video, databases, and other filetypes.
Topics
Community Discussion
No community discussion yet for this question.