SY0-701 Question #778: Real Exam Question with Answer & Explanation

The correct answer is B: Acquisition. Acquisition refers to the process of capturing and preserving digital evidence in a forensically sound, non-alterable format (e.g., bit-for-bit imaging or write-once storage), ensuring the integrity of the emails for later analysis.

Submitted by alyssa_d· Mar 6, 2026Security Operations

Question

An administrator needs to ensure all emails sent and received by a specific address are stored in a non-alterable format. Which of the following best describes this forensic concept?

Options

AE-discovery
BAcquisition
CLegal hold
DChain of custody

Explanation

Acquisition refers to the process of capturing and preserving digital evidence in a forensically sound, non-alterable format (e.g., bit-for-bit imaging or write-once storage), ensuring the integrity of the emails for later analysis.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice Browse All SY0-701 Questions