During incident response, a forensic analyst needs to preserve evidence from a compromised server without altering any data on the system. Which action represents the CORRECT approach to evidence collection?

Which security technology monitors network traffic for known attack signatures and malicious pattern...

Which identity and access management (IAM) technology allows users to authenticate once and gain acc...

A security operations center (SOC) analyst wants to correlate security events from firewalls, server...

A security team needs to control and monitor administrative access to critical servers, including re...

A security analyst receives an alert that a user account has been locked out after multiple failed l...