CompTIA
SY0-701 · Question #1037
A company has experienced a large data breach. The external investigators want to make sure that any evidence related to the breach is preserved. Which of the following incident response activities…
The correct answer is B. Chain of custody. Chain of custody ensures evidence is properly collected, preserved, documented, and handled so it remains admissible and unaltered during an investigation.
Submitted by yousef_jo· Mar 6, 2026Security Operations
Question
A company has experienced a large data breach. The external investigators want to make sure that any evidence related to the breach is preserved. Which of the following incident response activities docs this fall under?
Options
- ARecovery
- BChain of custody
- CLegal hold
- DPreparation
How the community answered
(17 responses)- B94% (16)
- D6% (1)
Explanation
Chain of custody ensures evidence is properly collected, preserved, documented, and handled so it remains admissible and unaltered during an investigation.
Community Discussion
No community discussion yet for this question.