Free CompTIA CySA+ CS0-003 Practice Question

During an incident response, what is the primary reason for placing a system into read-only mode?

  • To allow for faster data acquisition.

  • To enhance the performance of forensic tools.

  • To ensure the system can still log new events.

  • To prevent any modifications to the data.

This question's topic:
CompTIA CySA+ CS0-003 / 
Incident Response and Management
Your Score:

Check or uncheck an objective to set which questions you will receive.