Following an Incident, an Administrator Is Gathering Forensic Evidence from a Server

question 81

Multiple Choice

Following an incident, an administrator is gathering forensic evidence from a server for a human resources investigation. Which of the following best practices is MOST important to document throughout the process to maintain integrity of the findings?

• A) Acceptable use policy violations
• B) Server configuration
• C) Chain of custody
• D) Data loss incidents

---

Definitions:

Historical Rate

A reference to the exchange rate used in the past for converting one currency to another at a specific time.

Restated

Refers to financial statements that have been revised from their original figures to correct errors or account for retrospective changes in accounting policy.

U.S. Dollars

The currency of the United States, used as the standard unit of money for transactions within the country and internationally.

Translation Adjustment

An adjustment made in the process of converting the financial statements of a company into the currency of another country, reflecting changes in exchange rates.