Joe an employee has reported to Ann a network technician an unusual device plugged into a USB port on a workstation in the call center. Ann unplugs the workstation and brings it to the IT department where an incident is opened. Which of the following should have been done first?
A. Notify the incident response team lead
B. Document chain of custody
C. Take a copy of volatile memory
D. Make an image of the hard drive
Answer: A. Notify the incident response team lead
Computer Science & Information Technology
You might also like to view...
Give an example of a schedule of two transactions in which a two-phase locking concurrency control causes one of the transactions to wait but a SNAPSHOT isolation control aborts one of the transactions.
What will be an ideal response?
Computer Science & Information Technology
A composition or “has-a” relationship is represented in the UML by:
a. Attaching a solid diamond to the association line. b. Attaching a solid triangle to the association line. c. Making the association line bolded. d. Making the association line dashed
Computer Science & Information Technology