CompTIA
JK0-801 · Question #170
A customer is terminating an employee for suspected activity that is against company policy. They have called Ann to consult with them on how to best preserve any evidence the company may be…
The correct answer is B. Remove and secure any HDD from the computer, documenting the process. See the full explanation below for the reasoning.
Question
A customer is terminating an employee for suspected activity that is against company policy. They have called Ann to consult with them on how to best preserve any evidence the company may be required to provide in court. Which of the following would BEST preserve the integrity of the data and best serve the client?
Options
- ACreate an image of the hard drive and store it on a NTFS drive.
- BRemove and secure any HDD from the computer, documenting the process.
- CStore the computer in the server room until it is required.
- DLock the user out of the computer and let another employee use it until needed.
How the community answered
(17 responses)- A12% (2)
- B82% (14)
- C6% (1)
Community Discussion
No community discussion yet for this question.