CompTIA A+ Core 2 (220-1102) — Question 330

An administrator responded to an incident where an employee copied financial data to a portable hard drive and then left the company with the data. The administrator documented the movement of the evidence. Which of the following concepts did the administrator demonstrate?

Answer options

• A. Preserving chain of custody
• B. Implementing data protection policies
• C. Informing law enforcement
• D. Creating a summary of the incident

Correct answer: A

Explanation

The correct answer is A, as preserving the chain of custody is crucial for maintaining the integrity of evidence in legal situations. Options B, C, and D do not directly relate to the documentation and handling of evidence, which is essential in this scenario.