CompTIA A+ Core 2 (220-1002) — Question 10

A user's computer is suspected of hosting illegal files. The IT department has removed the computer and placed it in a secured, cypher-locked room, where it will remain until the local authorities arrive.
Which of the following actions should the IT department perform NEXT?

Answer options

• A. Preserve data integrity
• B. Identify violations of acceptable use
• C. Collect evidence of illegal activity
• D. Report through proper channels

Correct answer: A

Explanation

The correct action is to preserve data integrity to ensure that any evidence remains unaltered for investigation. Identifying violations and collecting evidence are important, but they should not occur until the integrity of the data is secured. Reporting through proper channels is also crucial, but it follows the preservation of the evidence.