A Security Incident Occurs That Requires a Systems Administrator to Take

question 425

Multiple Choice

A security incident occurs that requires a systems administrator to take an image of a user's workstation hard drive. Which of the following should be taken at the time the system image is generated and retained through the file of the investigation to assure files have not been modified since?

• A) A checksum hash of the drive image or files
• B) Copies of the system logs at specific intervals
• C) A snapshot of the file system
• D) The user's credentials and permissions

---

Definitions:

Production Volume

The total quantity of products manufactured within a specific period, indicating the level of output.

Economies of Scale

The cost advantage achieved when production becomes efficient, as fixed costs are spread over more units of output.

Advertising Dollars

The amount of funding allocated to promotional activities in order to increase product or service visibility.

Economies of Scale

Cost advantages that enterprises obtain due to their scale of operation, with cost per unit of output generally decreasing as scale is increased.