Creating a ____ of each compromised system on write-only media for later study,and as evidence,can be very useful.
A) forensic disk image
B) network trace
C) response plan
D) network image

Question

Quizplus · Accepted Answer

Creating a forensic disk image of each compromised system allows for a complete and exact copy of the system to be saved on write-only media. This can be analyzed later to determine the methods and extent of the compromise, as well as provide evidence for legal proceedings. Network trace and network image are not relevant in this context, while response plan is a proactive strategy for dealing with security incidents, rather than a reactive measure such as creating a forensic disk image.

Creating a ____ of Each Compromised System on Write-Only Media