CompTIA
MB0-001 · Question #213
If a user's device is compromised, it is best practice to FIRST:
The correct answer is B. Capture the logs. See the full explanation below for the reasoning.
Question
If a user's device is compromised, it is best practice to FIRST:
Options
- AWipe the device.
- BCapture the logs.
- CLock the device.
- DDocument the incident.
How the community answered
(40 responses)- A3% (1)
- B80% (32)
- C5% (2)
- D13% (5)
Community Discussion
No community discussion yet for this question.