You company suspects an employee of sending unauthorized emails to competitors. These emails
are alleged to contain confidential company dat
a. Which of the following is the most important step for you to take in preserving the chain of
custody?

Which of the following are the levels of public or commercial data classification system?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following is a formula, practice, process, design, instrument, pattern, or compilation of
information which is not generally known, but by which a business can obtain an economic
advantage over its competitors?

Which of the following backup sites takes the longest recovery time?

John works as a security manager for Soft Tech Inc. He is working with his team on the disaster
recovery management plan. One of his team members has a doubt related to the most cost effective
DRP testing plan. According to you, which of the following disaster recovery testing plans is the most
cost-effective and efficient way to identify areas of overlap in the plan before conducting more
demanding training exercises?

The incident response team has turned the evidence over to the forensic team. Now, it is the time to
begin looking for the ways to improve the incident response process for next time. What are the
typical areas for improvement?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following attacks can be mitigated by providing proper training to the employees in an
organization?

Which of the following is the default port for Simple Network Management Protocol (SNMP)?

Which of the following is a variant with regard to Configuration Management?

You work as a Forensic Investigator. Which of the following rules will you follow while working on a
case? Each correct answer represents a part of the solution. Choose all that apply.