CompTIA
SY0-501 · Question #264
Joe a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the h
Sign in or unlock SY0-501 to reveal the answer and full explanation for question #264. The question stem and answer options stay visible for context.
Submitted by anjalisingh· Mar 4, 2026Security operations
Question
Joe a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?
Options
- AOrder of volatility
- BChain of custody
- CRecovery procedure
- DIncident isolation
Unlock SY0-501 to see the answer
You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#order of volatility#digital forensics#incident response#memory forensics