Free CompTIA Security+ SY0-601 Practice Question
Your organization is facing litigation, and as part of the legal process, you are required to produce relevant digital documents and emails within a strict timeframe. You must ensure the integrity and authenticity of the evidence is maintained throughout the process. What is the most important initial step in the e-discovery process when responding to this legal request?
Issuing a legal hold to prevent the deletion of relevant data
Acquiring a forensic image of devices and systems involved
Interviewing potential witnesses to gain more context about the incident
Beginning the metadata analysis of documents to locate pertinent information
This question's topic:
CompTIA Security+ SY0-601 /
Operations and Incident Response
SAVE $49