A file server has been compromised. You need to ensure that non-volatile data is preserved as part of the investigation. Which of the following is the BEST way to do this?
A. Image the hard drive.
B. Copy the hard drive's data to DVD.
C. Complete an incremental backup of the hard drive's data.
D. Complete a differential backup of the hard drive's data.
A
Explanation: You should image the hard drive to ensure that all non-volatile data is preserved.
None of the other options ensures that all the non-volatile data is preserved. When you copy data to a DVD, there is a possibility that open files will not be copied. Incremental and differential backups only back up data since the last full backup (or incremental backup).
You might also like to view...
When invoking a method with an object argument, ___________ is passed.
a. the contents of the object b. a copy of the object c. the reference of the object d. the object is copied, then the reference of the copied object
List the three types of MAC frames defined by the 802.11 standard.
What will be an ideal response?
Instance variables declared private are not accessible
a) outside the class b) by other methods of the same class c) by other members of the same class d) inside the same class
What are the disadvantages of the flat model?
What will be an ideal response?