ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam CS0-001 All Questions

View all questions & answers for the CS0-001 exam
Go to Exam

Exam CS0-001 topic 1 question 10 discussion

Actual exam question from CompTIA's CS0-001
Question #: 10
Topic #: 1
[All CS0-001 Questions]

A security analyst received a compromised workstation. The workstation's hard drive may contain evidence of criminal activities. Which of the following is the
FIRST thing the analyst must do to ensure the integrity of the hard drive while performing the analysis?

  • A. Make a copy of the hard drive.
  • B. Use write blockers.
  • C. Run rm ""R command to create a hash.
  • D. Install it on a different machine and explore the content.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by slcc99 at April 6, 2020, 12:20 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
slcc99
Highly Voted 5 years ago
This question was in the exam :)
upvoted 5 times
...
Jeend
Most Recent 2 years, 3 months ago
Blocker for keep data to change
upvoted 1 times
...
Datasianjan
4 years, 7 months ago
A - <--- why wouldn't this be the FIRST thing? B - A write blocker is any tool that permits read-only access to data storage devices without compromising the integrity of the data. C - rm -r deletes the target directory and recursively deletes everything inside that directory D - ??
upvoted 2 times
james23u
4 years, 6 months ago
The answer is A A Write Blocker: ensures hard drives being imaged cannot be written to or its data changed. It ensures integrity of the captured disk
upvoted 1 times
james23u
4 years, 6 months ago
I meant the answer is B
upvoted 3 times
...
...
antukin
4 years, 5 months ago
The question states "while performing analysis". I would assume that you make a copy before you perform an analysis.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago