Joe a Computer Forensic Technician Responds to an Active Compromise

question 437

Multiple Choice

Joe a computer forensic technician responds to an active compromise of a database server. Joe first collects information in memory, then collects network traffic and finally conducts an image of the hard drive. Which of the following procedures did Joe follow?

• A) Order of volatility
• B) Chain of custody
• C) Recovery procedure
• D) Incident isolation

---

Definitions:

Job Rotation

A practice where employees are moved between different jobs or tasks at a company to gain a variety of skills and reduce monotony.

Capabilities

The qualities, skills, and abilities that enable an individual or organization to perform effectively.

Training Device

Tools or systems used to facilitate learning and skill development in an organizational setting.

Mentoring

A personal development relationship in which a more experienced or knowledgeable person helps to guide a less experienced or knowledgeable person.