Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CompTIA Exam CS0-003 Topic 2 Question 28 Discussion

Actual exam question for CompTIA's CS0-003 exam
Question #: 28
Topic #: 2
[All CS0-003 Questions]

An organization receives a legal hold request from an attorney. The request pertains to emails related to a disputed vendor contract. Which of the following is the first step for the security team to take to ensure compliance with the request?

Show Suggested Answer Hide Answer
Suggested Answer: B

The first step for the security team when receiving a legal hold request is to notify the relevant departments to preserve all potentially relevant information. This ensures that no data is altered, deleted, or otherwise tampered with, which is critical for maintaining the integrity of the evidence. Preserving information includes emails, documents, and any other data that might be relevant to the legal matter. Establishing a chain of custody and backing up data are also important steps, but notifying the involved parties is the immediate priority to prevent data loss.


Contribute your Thoughts:

Karma
2 months ago
I'd go with B too. Covering your bases by getting the relevant teams involved right away is key. Can't have any 'oops, I deleted that' moments.
upvoted 0 times
...
Leana
2 months ago
Ha! Publicly disclosing the request to other vendors? That's a good way to get in trouble. B is the way to go, keep it internal until you have to share.
upvoted 0 times
Myong
1 months ago
D) Back up the mailboxes on the server and provide the attorney with a copy.
upvoted 0 times
...
Talia
1 months ago
Agreed, we need to make sure we handle this request properly.
upvoted 0 times
...
Hoa
2 months ago
B) Notify the departments involved to preserve potentially relevant information.
upvoted 0 times
...
Van
2 months ago
C) Establish a chain of custody, starting with the attorney's request.
upvoted 0 times
...
...
Stephanie
3 months ago
Definitely B. Gotta make sure those departments know what's up so they don't accidentally delete anything important. Don't want to be scrambling later on.
upvoted 0 times
Kiley
1 months ago
Good point, communication is key in these situations.
upvoted 0 times
...
Glenn
2 months ago
C) Establish a chain of custody, starting with the attorney's request.
upvoted 0 times
...
Jovita
2 months ago
B) Notify the departments involved to preserve potentially relevant information.
upvoted 0 times
...
...
Abel
3 months ago
Backing up the mailboxes on the server and providing the attorney with a copy should also be done to ensure we have a record of the emails.
upvoted 0 times
...
Glen
3 months ago
Establishing a chain of custody, starting with the attorney's request, is crucial for compliance with the legal hold request.
upvoted 0 times
...
Julio
3 months ago
B) Notify the departments involved to preserve potentially relevant information seems like the right first step. That way, you can ensure all relevant data is preserved before anything happens to it.
upvoted 0 times
Lai
2 months ago
C) Establish a chain of custody, starting with the attorney's request, is also crucial. That way, you can track the handling of the data from the beginning.
upvoted 0 times
...
Bette
3 months ago
B) Notify the departments involved to preserve potentially relevant information is definitely the first step to take. It's important to make sure nothing gets lost.
upvoted 0 times
...
...
Amber
3 months ago
I agree with Christoper. It's important to make sure we don't lose any important emails related to the disputed vendor contract.
upvoted 0 times
...
Christoper
3 months ago
I think the first step should be to notify the departments involved to preserve potentially relevant information.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77