What step should be taken after data is collected, but before equipment is disconnected, if a security breach is found on a system?
What step should be taken after data is collected, but before equipment is disconnected, if a security breach is found on a system?
- Create a drive image of the system.
- Isolate the infected system.
- Photograph the system.
- Determine if data tampering has occurred.
Related exam: CCNA Security Chapter 11 Exam Answers
About The Author
The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.
