Question
A forensic team defines retention rules for logs before incidents. Why?
Correct Answer: A
To ensure useful evidence is available later
Retention policies support forensic readiness.
Retention policies support forensic readiness.
Leave a Reply