CompTIA Cloud+ (CV0-003) — Question 251
A cloud administrator has received a physical disk that was analyzed by the incident response team. Which of the following documents should the cloud administrator update?
Answer options
- A. Chain of custody
- B. Incident taxonomy
- C. Risk register
- D. Incident playbook
Correct answer: A
Explanation
The correct answer is A, as the chain of custody document is crucial for maintaining the integrity and tracking of evidence collected during an incident. The other options, while important, do not directly relate to the documentation needed for physical evidence obtained from an investigation.