Security+ Answer Forensic Analyst

Here’s the Answer to the Question posted on Facebook

Q. After a recent incident, a forensic analyst was given several hard drives to analyze. What should the analyst do first?

A. Take screenshots and capture system images.

B. Take hashes and screenshots.

C. Take hashes and capture system images.

D. Perform antivirus scans and create chain-of-custody documents.

Answer available until March 11, 2016.

Get over 400 Security+ (SY0-401 questions here).SY0-401 Get Certified Get Ahead

See Chapter 11 of the CompTIA Security+: Get Certified Get Ahead: SY0-401 Study Guide.

Get Certified Get Ahead Security+ SY0-401

Check out Security+ blogs here.