CompTIA
JK0-018 · Question #551
The security manager received a report that an employee was involved in illegal activity and has saved data to a workstation's hard drive. During the investigation, local law enforcement's criminal…
Sign in or unlock JK0-018 to reveal the answer and full explanation for question #551. The question stem and answer options stay visible for context.
Question
The security manager received a report that an employee was involved in illegal activity and has saved data to a workstation's hard drive. During the investigation, local law enforcement's criminal division confiscates the hard drive as evidence. Which of the following forensic procedures is involved?
Options
- AChain of custody
- BSystem image
- CTake hashes
- DOrder of volatility
Unlock JK0-018 to see the answer
You've previewed enough free JK0-018 questions. Unlock JK0-018 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.