Which of the must occur to ensure the integrity of the image?

Immediately following the report of a potential breach, a security engineer creates a forensic image of the server in question as part of the organization incident response procedure .

Which of the must occur to ensure the integrity of the image?
A . The image must be password protected against changes.
B . A hash value of the image must be computed.
C . The disk containing the image must be placed in a seated container.
D . A duplicate copy of the image must be maintained

View Answer

Answer: B