CompTIA CySA+ CS0-003 Practice Question
During an incident response, which step ensures that evidence collected is admissible in court?
Incident identification
Establishing chain of custody
Creating an executive summary
Logging file integrity
During an incident response, which step ensures that evidence collected is admissible in court?
Incident identification
Establishing chain of custody
Creating an executive summary
Logging file integrity