QuestionQ121

Security Operations

Which incident-response team representative creates forensic backups of the systems involved in the incident?

  • A Legal representative
  • B Technical representative
  • C Lead investigator
  • D Information security representative
Explanation

The technical representative performs system-level evidence preservation, including making forensic backups of affected systems so their data can be examined without altering the original evidence.

Community Discussion

No comments yet. Be the first to start the discussion!