____ captures valuable evidence for a future prosecution and provides data to help during the incident eradication and follow-up phases.
A) The response plan
B) Documentation
C) A system build plan
D) Network trace

Question

Quizplus · Accepted Answer

Documentation captures valuable evidence for a future prosecution and provides data to help during the incident eradication and follow-up phases. Documentation should include logs, incident reports, witness statements, and any other relevant information, which can be used to understand what happened during the incident and help identify the individuals involved. The documentation should be maintained in a secure location and preserved as evidence for any legal proceedings that may follow.

____ Captures Valuable Evidence for a Future Prosecution and Provides