You work as a Network Administrator for NetTech Inc. The company has a network that consists of 200 client computers and ten database servers. One morning, you find that a hacker is accessing unauthorized data on a database server on the network. Which of the following actions will you take to preserve the evidences?
Each correct answer represents a complete solution. Choose three.
A . Prevent a forensics experts team from entering the server room.
B . Preserve the log files for a forensics expert.
C . Prevent the company employees from entering the server room.
D . Detach the network cable from the database server.
Answer: B,C,D