The Chief Information Officer (CIO) is concerned with moving an application to a SaaS cloud
provider. Which of the following can be implemented to provide for data confidentiality assurance
during and after the migration to the cloud?

Which of the following is a Data Loss Prevention (DLP) strategy and is MOST useful for securing
data in use?

A customer service department has a business need to send high volumes of confidential
information to customers electronically. All emails go through a DLP scanner. Which of the
following is the BEST solution to meet the business needs and protect confidential information?

Which of the following is a best practice when a mistake is made during a forensics examination?

An incident response team member needs to perform a forensics examination but does not have
the required hardware. Which of the following will allow the team member to perform the
examination with minimal impact to the potential evidence?

Which of the following should Jane, a security administrator, perform before a hard drive is
analyzed with forensics tools?

DRAG DROP
A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items
in the list below in the correct order in which the forensic analyst should preserve them.

Computer evidence at a crime is preserved by making an exact copy of the hard disk. Which of the
following does this illustrate?

To ensure proper evidence collection, which of the following steps should be performed FIRST?

A security administrator needs to image a large hard drive for forensic analysis. Which of the
following will allow for faster imaging to a second hard drive?