312-49 Exam QuestionsBrowse all questions from this exam

312-49 Exam - Question 109


An executive has leaked the company trade secrets through an external drive. What process should the investigation team take if they could retrieve his system?

Show Answer
Correct Answer: A

Postmortem Analysis is the correct process to take in this scenario because it involves examining the system after the incident has occurred to gather and analyze evidence. This type of analysis allows the investigation team to understand the actions taken by the executive, including the retrieval and transfer of data, which is essential in cases involving data breaches and leak of trade secrets.

Discussion

1 comment
Sign in to comment
a364b16Option: B
Jun 22, 2024

It should be B, why fake answers but promised that these answers have being verified by proffessionals