Question
A forensic examiner must collect evidence from a running server with minimal disruption. What should be planned?
Select an option. Your answer will be checked instantly.
Correct Answer: A. A documented live response procedure
Explanation:
Live response should be planned and documented.
Leave a Reply