Following an incident, an administrator is gathering forensic evidence from a server for a human resources investigation.
Which of the following best practices is MOST important to document throughout the process to maintain integrity of the findings?
A. Acceptable use policy violations
B. Server configuration
C. Chain of custody
D. Data loss incidents
Following an incident, an administrator is gathering forensic evidence from a server for a human resources investigation
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
Following an incident, an administrator is gathering forensic evidence from a server for a human resources investigation
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!