QuestionQ63

Threat Intelligence in Incident Response

Which forensic-readiness planning step creates a backup for future reference and helps present evidence in a court of law?

  • A Keeping an incident response team ready to review the incident
  • B Determining the sources of evidence
  • C Creating a process for documenting the procedure
  • D Identifying the potential evidence required for an incident
Explanation

A process for documenting procedures creates a durable record of forensic activities and evidence handling. This record supports later reference, auditability, and the presentation of evidence in legal proceedings.

Community Discussion

No comments yet. Be the first to start the discussion!