Prepare CompTIA SY0-601 Exam

A security administrator suspects an employee has been emailing proprietary information to a competitor. Company policy requires the administrator to capture an exact copy of the employee's hard disk. Which of the following should the administrator use?

Which of the following is MOST likely to outline the roles and responsibilities of data controllers and data processors?

Phishing and spear-phishing attacks have been occurring more frequently against a company's staff. Which of the following would MOST likely help mitigate this issue?

On which of the following is the live acquisition of data for forensic analysis MOST dependent? (Choose two.)

Which of the following incident response steps involves actions to protect critical systems while maintaining business operations?