A customer service department has a business need to send high volumes of confidential information to
customers electronically. All emails go through a DLP scanner. Which of the following is the BEST solution
to meet the business needs and protect confidential information?

Which of the following is a best practice when a mistake is made during a forensics examination?

An incident response team member needs to perform a forensics examination but does not have the
required hardware. Which of the following will allow the team member to perform the examination with
minimal impact to the potential evidence?

DRAG DROP
A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list
below in the correct order in which the forensic analyst should preserve them.

Which of the following should Jane, a security administrator, perform before a hard drive is analyzed with
forensics tools?

Computer evidence at a crime is preserved by making an exact copy of the hard disk. Which of the
following does this illustrate?

To ensure proper evidence collection, which of the following steps should be performed FIRST?

A security administrator needs to image a large hard drive for forensic analysis. Which of the following
will allow for faster imaging to a second hard drive?

A security technician wishes to gather and analyze all Web traffic during a particular time period.
Which of the following represents the BEST approach to gathering the required data?

A forensic analyst is reviewing electronic evidence after a robbery. Security cameras installed at the site
were facing the wrong direction to capture the incident. The analyst ensures the cameras are turned to
face the proper direction. Which of the following types of controls is being used?