Suggested Answer:A🗳️
A technical representative creates forensic backups of systems that are the focus of an incident and provides valuable information about the configuration of the network and target system. Answer option B is incorrect. A lead investigator acts as the manager of the computer security incident response team. Answer option D is incorrect. The legal representative looks after legal issues and ensures that the investigation process does not break any law. Answer option C is incorrect. The information security representative informs about the security safeguards that may affect their ability to respond to the incident.
The correct answer is: B. Lead investigator. The lead investigator is a member of the incident response team who is responsible for taking forensic backups of systems that are the focus of an incident. A forensic backup is a copy of the data on a system that is made in a way that preserves the integrity of the data, in order to be used as evidence in a legal case. The lead investigator is responsible for ensuring that the forensic backup process is carried out in a way that maintains the chain of custody, so that the authenticity and integrity of the data can be established.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.312-38 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
ethacker
6 months, 3 weeks agoHackpin10101
11 months, 1 week ago