Question 108
Main Page
What is one of the final actions in a digital forensics lifecycle?
A. Attack replication
B. Evidence return
C. Patch deployment
D. SOC escalation
Answer: Evidence return
After analysis and reporting, original evidence should be returned to its rightful owner if permitted.