Which of the following cannot be undertaken in conjunction or while computer incident handling is ongoing?
A.
System development activity
B.
Help-desk function
C.
System Imaging
D.
Risk management process
Explanation:
The computer system should not be changed, while the incident handling is ongoing. System development
should not occur during incident handling.
Incorrect Answers:
B: As part of the ongoing incident handling employees, vendors, customers, partner, devices or sensors report
the event to Help Desk.
C: System imaging would not affect the ongoing incident handling and should take place to
D: The Risk management process would not affect the ongoing incident handling.https://en.wikipedia.org/wiki/Computer_security_incident_management