Following an Incident, an Administrator Is Gathering Forensic Evidence from a Server

question 81

Multiple Choice

Following an incident, an administrator is gathering forensic evidence from a server for a human resources investigation. Which of the following best practices is MOST important to document throughout the process to maintain integrity of the findings?

• A) Acceptable use policy violations
• B) Server configuration
• C) Chain of custody
• D) Data loss incidents

---

Definitions:

Supreme Court

The highest court in a country or state, which has the ultimate authority to adjudicate in legal disputes and interpret the constitution.

Arizona's Immigration Law

Refers to legislation such as SB 1070, enacted by the state of Arizona, aimed at identifying, prosecuting, and deporting undocumented immigrants.

2012 Case

A specific legal matter or decision from the year 2012, without more context, it refers to a broad range of possibilities across various legal jurisdictions.

Policies

Guiding principles or courses of action adopted or proposed by a government, party, business, or individual.