A security analyst received a compromised workstation. The workstation's hard drive may contain evidence of criminal activities. Which of the following is the
FIRST thing the analyst must do to ensure the integrity of the hard drive while performing the analysis?
A. Make a copy of the hard drive.
B. Use write blockers.
C. Run rm ""R command to create a hash.
D. Install it on a different machine and explore the content.
A security analyst received a compromised workstation. The workstation's hard drive may contain evidence of criminal act
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
A security analyst received a compromised workstation. The workstation's hard drive may contain evidence of criminal act
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!