Study. uk . com
  1. Home
  2. All questions
  3. Question 503

CompTIA Security+ study material · question 503 of 611

Which sequence describes the forensic process?

  1. Examination, collection, reporting, analysis
  2. Analysis, collection, examination, reporting
  3. Collection, examination, analysis, reporting
  4. Collection, reporting, examination, analysis
Show the answer

Answer: C. Collection, examination, analysis, reporting

Each stage narrows a large body of data toward a defensible conclusion, in that order.

Source: NIST SP 800-86 (NIST) — SP 800-86 § 3 Performing the Forensic Process

Challenge yourself on this topic → Study as cards