Here’s the Answer to the Question posted on Facebook
Q. A forensic expert is preparing to analyze a hard drive. Which of the following should the expert do FIRST?
A. Capture an image.
B. Identify the order of volatility.
C. Create a chain-of-custody document.
D. Take a screenshot.
Answer available until May 4, 2016.
|Get over 400 Security+ (SY0-401 questions here).|
See Chapter 11 of the CompTIA Security+: Get Certified Get Ahead: SY0-401 Study Guide.