CompTIA A+ 220-1102 Practice Question
Crucial Technologies is conducting post-incident forensics after a possible compromise of a system. Before the system gets to its destination it will pass through numerous employees in the IT department. What document needs to be updated with the system as it makes its way to the proper section?
The operating system
Copy of the harddrive
Chain of custody
The incident ticket
Each employee's timecard