CompTIA CySA+ CS0-003 Practice Question
What is the primary purpose of preservation during an incident response?
To maintain the integrity and evidentiary value of data
To expedite the recovery of systems and normal operations
To facilitate communication among incident response team members
To document the incident response steps taken