A forensic analyst took an image of a workstation that was involved in an incident To BEST ensure the image is not tampered with me analyst should use:
A . hashing
B . backup tapes
C . a legal hold
D . chain of custody.
Answer: D
A forensic analyst took an image of a workstation that was involved in an incident To BEST ensure the image is not tampered with me analyst should use:
A . hashing
B . backup tapes
C . a legal hold
D . chain of custody.
Answer: D