CompTIA
SY0-301 · Question #364
SY0-301 Question #364: Real Exam Question with Answer & Explanation
Sign in or unlock SY0-301 to reveal the answer and full explanation for question #364. The question stem and answer options stay visible for context.
Question
To ensure proper evidence collection, which of the following steps should be preformed FIRST?
Options
- ATake hashes from the live system
- BReview logs
- CCapture the system image
- DCopy all compromised files
Unlock SY0-301 to see the answer
You've previewed enough free SY0-301 questions. Unlock SY0-301 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.