Which of the following will the incident handler MOST likely do to preserve the evidence?

exams 220-1102 V3 220-1102 exam 0 Comments

An incident handler needs to preserve evidence for possible litigation.

Which of the following will the incident handler MOST likely do to preserve the evidence?
A . Encrypt the files
B. Clone any impacted hard drives
C. Contact the cyber insurance company
D. Inform law enforcement

Answer: B