CompTIACompTIA
SY0-501 · Question #264
SY0-501 Question #264: Real Exam Question with Answer & Explanation
Sign in or unlock SY0-501 to reveal the answer and full explanation for question #264. The question stem and answer options stay visible for context.
Submitted by anjalisingh· Mar 4, 2026
Question
Joe a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?
Options
- AOrder of volatility
- BChain of custody
- CRecovery procedure
- DIncident isolation
Unlock SY0-501 to see the answer
You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.