A security incident occurs that requires a systems administrator to take an image of a users workstation hard drive. Which of the following should be taken at the time the system image is generated and retained through the file of the investigation to assure files have not been modified since?

🎲 Try a Random Question  |  Total Questions in Quiz: 548  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
CompTIA Server+ SK0-005 Exam Questions — practice the complete quiz, review flashcards, or try a random question.

The new CompTIA Server+ SK0-005 certification is updated version of CompTIA Server+ SK0-004 certification.   The CompTIA Server+ SK0-005 exam covers these topics: Server Hardware Installation & Management: Install and maintain physical hardware and storage. Server Administration: Manage and maintain servers, including OS configuration, access control and virtualization. Security & Disaster Recovery: Apply physical and network data security techniques and Understand disaster recovery and implement backup techniques. Troubleshooting: Diagnose and resolve system hardware, software,... Show more

A security incident occurs that requires a systems administrator to take an image of a users workstation hard drive. Which of the following should be taken at the time the system image is generated and retained through the file of the investigation to assure files have not been modified since?