A security manager has discovered that sensitive information stored on a server has been compromised. The organization is required by law to notify law enforcement. What should the security manager do first to preserve non-volatile evidence on the server

Question

Computers and Technology

Fabian May

30 July, 00:01

A security manager has discovered that sensitive information stored on a server has been compromised. The organization is required by law to notify law enforcement. What should the security manager do first to preserve non-volatile evidence on the server

+2

Answers (1)

Know the Answer?

Esther Potter · Answer 1

Answer: disconnect power to the server.

Explanation:

So as to avoid further damage and also to preserve evidence of the server compromise, the server needs to be disconnected completely from the power source.