SY0-701 · Question #778
An administrator needs to ensure all emails sent and received by a specific address are stored in a non-alterable format. Which of the following best describes this forensic concept?
The correct answer is B. Acquisition. Acquisition refers to the process of capturing and preserving digital evidence in a forensically sound, non-alterable format (e.g., bit-for-bit imaging or write-once storage), ensuring the integrity of the emails for later analysis.
Question
An administrator needs to ensure all emails sent and received by a specific address are stored in a non-alterable format. Which of the following best describes this forensic concept?
Options
- AE-discovery
- BAcquisition
- CLegal hold
- DChain of custody
How the community answered
(37 responses)- B95% (35)
- C3% (1)
- D3% (1)
Explanation
Acquisition refers to the process of capturing and preserving digital evidence in a forensically sound, non-alterable format (e.g., bit-for-bit imaging or write-once storage), ensuring the integrity of the emails for later analysis.
Community Discussion
No community discussion yet for this question.