Exam CS0-003 topic 1 question 224 discussion

I am not quite sure I understand the question. Taking photos makes only sense if it was a physical attack on the closet.. does that happen?

I change it to D not A disregard

You would record the issue and valid each connection first. Photos would be next.

Horrible question. Assuming this is a physical closet then yes take photo's, but that is not necessarily obvious from how it is written. Do better CompTIA.

This belongs in sec+. But yeah I was confused too. The answer is definitely "take photos".

Network data closets are often targets for physical attacks because they contain critical networking hardware. Malicious activities in these environments often involve actions like: Unplugging or rerouting cables. Physically damaging network devices. Adding unauthorized devices (e.g., rogue access points or keyloggers). Tampering with configurations by accessing network devices physically. In this case, documenting the incident by taking photos of the impacted items (option D) would be appropriate because it helps capture evidence of physical tampering or damage, which would be relevant in a physical security breach.

Documenting the incident is about capturing evidence, taking photos will work.

Taking photos is a direct way to document the physical state of the impacted items after an incident. This can provide an immediate and clear visual record of the scene as it was found, which can be crucial for subsequent investigations and for understanding what occurred. This documentation can be especially valuable if there is any physical damage or if there are indicators of how the attackers gained access or what they might have done while inside.

In the context of a malicious attack on a network data closet, recording and validating each connection (Option B) would be crucial for understanding the scope of the incident, identifying potential points of compromise, and facilitating remediation efforts.