Joe a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?

🎲 Try a Random Question  |  Total Questions in Quiz: 201  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
SY0-501 CompTIA Security+ Certification Exam — practice the complete quiz, review flashcards, or try a random question.


Joe a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?