Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
It's a critical system so might involve legalities. So before restoration, it is important to preserve the evidences of the incident.
Yes need to preserve the evidence, rather that just restore the system.
Definitely D, come on guys if you dont preserve incident data and your first priority is to restore the system without having the data for the root cause, chances are high that after restoration, system will be unavailable again.