CompTIA Study Materials
AWS Study Materials
AWS Cloud Practitioner AWS Cloud Practitioner
AWS Cloud Practitioner CLF-C02
Microsoft Study Materials
Microsoft Azure Fundamentals Microsoft Azure Fundamentals
Microsoft Azure Fundamentals AZ-900

Free CompTIA Security+ SY0-701 Practice Question

An organization's incident response team has successfully contained a data breach incident. Which of the following actions is the MOST appropriate next step to ensure that the digital evidence remains intact for forensic analysis?

  • Creating a forensic image of affected systems

  • Turning off systems to ensure data is not tampered with

  • Performing secure backups of affected systems

  • Disconnecting compromised systems from the network

This question is for objective:
Security Operations
Your Score:
Security Operations
Threats, Vulnerabilities, and Mitigations
Security Architecture
Security Program Management and Oversight
General Security Concepts