CompTIA
JK0-018 · Question #47
In the initial stages of an incident response, Matt, the security administrator, was provided the hard drives in question from the incident manager. Which of the following incident response…
The correct answer is A. Take hashes D. Capture the system image. See the full explanation below for the reasoning.
Question
In the initial stages of an incident response, Matt, the security administrator, was provided the hard drives in question from the incident manager. Which of the following incident response procedures would he need to perform in order to begin the analysis? (Select TWO).
Options
- ATake hashes
- BBegin the chain of custody paperwork
- CTake screen shots
- DCapture the system image
- EDecompile suspicious files
How the community answered
(26 responses)- A85% (22)
- B8% (2)
- C4% (1)
- E4% (1)
Community Discussion
No community discussion yet for this question.