Valid 220-1102 Dumps shared by ExamDiscuss.com for Helping Passing 220-1102 Exam! ExamDiscuss.com now offer the newest 220-1102 exam dumps, the ExamDiscuss.com 220-1102 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 220-1102 dumps with Test Engine here:
A technician receives a high-priority ticket about sensitive information collected from an end user's workstation. Which of the following steps should a technician take to preserve the chain of custody for a forensic investigation?
Correct Answer: C
In the context of a forensic investigation, especially involving sensitive information, preserving the integrity and the chain of custody of the potential evidence is crucial. The step to "Recover and secure the workstation" involves physically securing the workstation to prevent any unauthorized access and logically securing the data by ensuring that no changes are made to the system or files. This step helps maintain the original state of the workstation, which is essential for a legitimate forensic analysis and ensuring that the evidence is admissible in legal proceedings.