Question 321:
A security analyst captures forensic evidence from a potentially compromised system for further investigation. The evidence is documented and securely stored to FIRST:
Answer options:
A. maintain the chain of custody. B. preserve the data. C. obtain a legal hold. D. recover data at a later time.