CompTIA Security Plus Mock Test Q1375

Joe a user upon arriving to work on Monday morning noticed several files were deleted from the system. There were no records of any scheduled network outages or upgrades to the system. Joe notifies the security department of the anomaly found and removes the system from the network. Which of the following is the NEXT action that Joe should perform?

A. Screenshots of systems
B. Call the local police
C. Perform a backup
D. Capture system image

Correct Answer: A
Section: Mixed Questions