B. Preserving the integrity of evidence is crucial when dealing with an intrusion because it ensures that any subsequent investigation, whether internal or legal, is based on accurate and untampered data. Maintaining evidence integrity allows the organization to analyze the attack, understand the scope, and potentially use the findings in court if necessary.
A. Report the incident to senior management. The rational is that if the server is critical to the business, senior management will decide weather the risk associated is acceptable compared to the cost of the isolating or shutting it down for investigation is investigation.
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Raj91188
Highly Voted 1 month, 3 weeks agopgonza
Most Recent 2 months, 2 weeks ago