Why Is It Important for an Incident Responder to Copy

question 160

Multiple Choice

Why is it important for an Incident Responder to copy malicious files to the ATP file store or create an image of the infected system during the Recovery phase?

• A) To have a copy of the file policy enforcement
• B) To test the effectiveness of the current assigned policy settings in the Symantec Endpoint Protection Manager (SEPM)
• C) To create custom IPS signatures
• D) To document and preserve any pieces of evidence associated with the incident

---

Definitions:

Taxable Income

The amount of an individual’s or corporation's income used to calculate how much tax they owe to the government, after deductions and exemptions.

Price Elasticities

Measures of the sensitivity of the quantity demanded or supplied of a good to a change in its price.

Tax Burden

The measure of the total amount of taxes that individuals, businesses, or other entities must pay relative to their income or consumption.

Elastic Supply

characterizes a market situation where the quantity supplied changes significantly in response to changes in price.