A Security Incident Occurs That Requires a Systems Administrator to Take

question 425

Multiple Choice

A security incident occurs that requires a systems administrator to take an image of a user's workstation hard drive. Which of the following should be taken at the time the system image is generated and retained through the file of the investigation to assure files have not been modified since?

• A) A checksum hash of the drive image or files
• B) Copies of the system logs at specific intervals
• C) A snapshot of the file system
• D) The user's credentials and permissions

---

Definitions:

Biceps Brachii

A muscle of the upper arm that flexes the elbow and rotates the forearm, consisting of two heads that join on the radius.

Triceps Brachii

A muscle of the back of the upper arm responsible for extension of the elbow.

Anconeus

A small muscle located at the elbow, involved in extending the elbow and stabilizing the elbow joint.

Scapula

A flat, triangular bone located in the upper back, commonly known as the shoulder blade.