Question 414:
A security analyst is acquiring data from a potential network incident. Which of the following evidence is the analyst MOST likely to obtain to determine the incident?
Answer options:
A. Volatile memory capture B. Traffic and logs C. Screenshots D. System image capture