When conducting a forensic investigation, and assuming that the attack has been stopped, which of the following actions should you preform first?

🎲 Try a Random Question  |  Total Questions in Quiz: 502  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
Testout Network Pro Review — practice the complete quiz, review flashcards, or try a random question.

The TestOut Network Pro certification measures your ability to perform tasks commonly performed by IT network professionals, including systems administrators, network administrators, network engineers and related careers. This certification covers the topics in CompTIA Network+ (N10-007) certification. The Testout Network pro certification syllabus covers multiple operating systems, including: Windows Client, Windows Server, macOS, Enterprise Wireless configuration, and Cisco Command-Line interface (routers and switches).


1. When conducting a forensic investigation, and assuming that the attack has been stopped, which of the following actions should you preform first?