CompTIA Security+ (SY0-701) — Question 500

Which of the following is the stage in an investigating when forensic images are obtained?

Answer options

• A. Acquisition
• B. Preservation
• C. Reporting
• D. E-discovery

Correct answer: A

Explanation

The correct answer is A, Acquisition, as it specifically refers to the process of obtaining forensic images crucial for analysis. The other options, such as Preservation, relate to maintaining evidence, Reporting involves summarizing findings, and E-discovery pertains to electronic data retrieval, none of which directly involve the acquisition of forensic images.