Which of the following is NOT a step that should be taken as part of a response policy?
A)Secure the area and disconnect devices from the network
B)Create documentation detailing the scene
C)Attempt to access files to determine if they are compromised
D)Protect the chain of custody of evidence

Question

Quizplus · Accepted Answer

Attempting to access files during a response can make the situation worse, as it could potentially spread the infection or damage the evidence. The other options are important steps in a response policy.

Which of the Following Is NOT a Step That Should