Free Preparation Discussions
MENU
CompTIA Exam CAS-004 Topic 4 Question 56 Discussion
Topic #: 4
During a recent security incident investigation, a security analyst mistakenly turned off the infected machine prior to consulting with a forensic analyst. upon rebooting the machine, a malicious script that
was running as a background process was no longer present. As a result, potentially useful evidence was lost. Which of the following should the security analyst have followed?
A legal hold is a process by which an organization instructs its employees or other relevant parties to preserve specific data for potential litigation. A legal hold is triggered when litigation is reasonably anticipated, such as when law enforcement officials inform an organization that an investigation has begun. The first step the organization should take is to initiate a legal hold to ensure that relevant evidence is not deleted, destroyed, or altered. A legal hold also demonstrates the organization's good faith and compliance with its duty to preserve evidence. Verified Reference:
https://percipient.co/litigation-hold-triggers-and-the-duty-to-preserve-evidence/
Clorinda
25 days agoMadalyn
8 days agoSlyvia
30 days agoKiera
6 days agoJenelle
7 days agoIsidra
11 days agoAlline
1 months agoMichell
4 days agoXuan
9 days agoCyndy
12 days agoRhea
2 months agoPeggy
2 months agoEric
13 days agoRemedios
1 months agoTammi
1 months agoGlory
2 months agoBettye
2 months agoCassandra
2 months ago