Joe, a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?

🎲 Try a Random Question  |  Total Questions in Quiz: 115  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
SY0-401 Exam: CompTIA Security+ — practice the complete quiz, review flashcards, or try a random question.


Joe, a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?