While an employee is on vacation, suspicion arises that the employee has been involved in malicious activity on the network.
The security engineer is concerned the investigation may need to continue after the employee returns to work. Given this concern, which of the following should the security engineer recommend to maintain the integrity of the investigation?
A. Create archival copies of all documents and communications related to the employee
B. Create a forensic image of network infrastructure devices
C. Create an image file of the employee’s network drives and store it with hashes
D. Install a keylogger to capture the employee’s communications and contacts
How to PASS CAS-004 in First Attempt?FULL Printable PDF and Software. VALID exam to help you PASS. |
 |
