(ISC)2(ISC)2
CISSP-ISSMP · Question #152
CISSP-ISSMP Question #152: Real Exam Question with Answer & Explanation
Sign in or unlock CISSP-ISSMP to reveal the answer and full explanation for question #152. The question stem and answer options stay visible for context.
Security Operations Management
Question
You company suspects an employee of sending unauthorized emails to competitors. These emails are alleged to contain confidential company dat
Options
- AWhich of the following is the most important step for you to take in preserving the chain of custody?
- BPreserve the email server including all logs.
- CSeize the employee's PC.
- DMake copies of that employee's email.
- EPlace spyware on the employee's PC to confirm these activities.
Unlock CISSP-ISSMP to see the answer
You've previewed enough free CISSP-ISSMP questions. Unlock CISSP-ISSMP for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Chain of Custody#Incident Response#Digital Forensics#Evidence Preservation