CompTIA CySA+ (CS0-001) — Question 89

A cyber-incident response team is responding to a network intrusion incident on a hospital network. Which of the following must the team prepare to allow the data to be used in court as evidence?

Answer options

• A. Computer forensics form
• B. HIPAA response form
• C. Chain of custody form
• D. Incident form

Correct answer: B

Explanation

The correct answer is B, the HIPAA response form, as it is critical for ensuring compliance with privacy regulations when handling patient data. The other options, while relevant in different contexts, do not specifically address the requirements for legal evidence in healthcare-related incidents.