Here’s the Answer to the Question posted on Facebook
Q. After a recent incident, a forensic analyst was given several hard drives to analyze. What should the analyst do first?
A. Take screenshots and capture system images.
B. Take hashes and screenshots.
C. Take hashes and capture system images.
D. Perform antivirus scans and create chain-of-custody documents.
Answer available until March 11, 2016.
|Get over 400 Security+ (SY0-401 questions here).|
See Chapter 11 of the CompTIA Security+: Get Certified Get Ahead: SY0-401 Study Guide.