To ensure proper evidence collection, which of the following steps should be performed FIRST?

Computer evidence at a crime is preserved by making an exact copy of the hard disk. Which of the following
does this illustrate?

DRAG DROP
A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list
below in the correct order in which the forensic analyst should preserve them.
Select and Place:

Which of the following should Jane, a security administrator, perform before a hard drive is analyzed with
forensics tools?

An incident response team member needs to perform a forensics examination but does not have the required
hardware. Which of the following will allow the team member to perform the examination with minimal impact to
the potential evidence?

Which of the following is a best practice when a mistake is made during a forensics examination?

A customer service department has a business need to send high volumes of confidential information to
customers electronically. All emails go through a DLP scanner. Which of the following is the BEST solution to
meet the business needs and protect confidential information?

Which of the following is a Data Loss Prevention (DLP) strategy and is MOST useful for securing data in use?

The Chief Information Officer (CIO) is concerned with moving an application to a SaaS cloud provider. Which of
the following can be implemented to provide for data confidentiality assurance during and after the migration to
the cloud?

Which of the following assets is MOST likely considered for DLP?