CompTIA CySA+ CS0-003 Practice Question
During an incident response, which of the following BEST ensures the validity of digital evidence for future legal proceedings?
Ensuring only senior security analysts handle the evidence
Regularly updating the incident response plan to include evidence handling procedures
Analyzing the integrity of data repeatedly throughout the investigation
Maintaining detailed records of who had possession of the evidence and the actions taken