Topic: CS0-003 topic 1 question 224
A security analyst is responding to an incident that involves a malicious attack on a network data closet. Which of the following best explains how the analyst should properly document the incident?
A.
Back up the configuration file for all network devices.
B.
Record and validate each connection.
C.
Create a full diagram of the network infrastructure.
D.
Take photos of the impacted items.