As Part of Incident Response, a Technician Is Taking an Image

question 88

Multiple Choice

As part of incident response, a technician is taking an image of a compromised system and copying the image to a remote image server (192.168.45.82) . The system drive is very large but does not contain the sensitive data. The technician has limited time to complete this task. Which of the following is the BEST command for the technician to run?

• A) tar cvf - / | ssh 192.168.45.82 "cat - > /images/image.tar"
• B) dd if=/dev/mem | scp - 192.168.45.82:/images/image.dd
• C) memdump /dev/sda1 | nc 192.168.45.82 3000
• D) dd if=/dev/sda | nc 192.168.45.82 3000

---

Definitions:

Dopamine

A neurotransmitter in the brain that is involved in pleasure, motivation, and reward mechanisms.

Adrenalin

A hormone and neurotransmitter, also known as epinephrine, that increases heart rate, muscle strength, blood pressure, and sugar metabolism, usually in response to stress or excitement.

Cross-functional Marketing

A strategy that involves multiple departments or groups within a company working together towards a common marketing goal.

Multichannel Marketing

A strategy that involves interacting with customers through multiple direct and indirect communication channels, maximizing reach and engagement.