Following a high-profile breach investigation at a multinational corporation, an incident handler is tasked with...

Vendor: ECCouncil
Product: 212-89
Update on: Feb 7, 2026
Questions: 272

ECCouncil 212-89 Question Answer

Following a high-profile breach investigation at a multinational corporation, an incident handler is tasked with the critical role of preserving, packaging, and transporting digital evidence from a server believed to be compromised and utilized as part of a global botnet operation. The challenge lay not only in the technical complexities of the operation but also in adhering to stringent legal and procedural frameworks to ensure the evidence remained admissible in court. Which of the following options ensures the highest level of evidence integrity during its transport?

On-site encryption of the server’s data, followed by its upload to secure cloud storage.

Creating a forensic image of the server's drives, verifying image hashes, storing images on encrypted drives, and maintaining detailed transport logs.

Encasing the server in anti-static packaging with chain-of-custody labels.

Transferring server data to a new drive using a write blocker and GPS tracking.