Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Cisco 200-201 Exam - Topic 5 Question 128 Discussion

During which phase of the forensic process is data that is related to a specific event labeled and recorded to preserve its integrity?
C) collection
A) examination
B) investigation
D) reporting

Cisco 200-201 Exam - Topic 5 Question 128 Discussion

Actual exam question for Cisco's 200-201 exam
Question #: 128
Topic #: 5
[All 200-201 Questions]

During which phase of the forensic process is data that is related to a specific event labeled and recorded to preserve its integrity?

Show Suggested Answer Hide Answer
Suggested Answer: C

During the collection phase of the forensic process, data related to a specific event is labeled and recorded to preserve its integrity. This step ensures that the data remains unaltered and authentic from the time of collection until it is presented as evidence, maintaining the chain of custody.Reference:= Cisco Cybersecurity Operations Fundamentals - Module 6: Security Incident Investigations


by Lawrence at Jul 21, 2026, 07:22 AM

Limited Time Offer

25%

Off

Get Premium 200-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ulysses
2 days ago
Agreed! Collection is crucial for preserving integrity.
upvoted 0 times
...
Tarra
7 days ago
I think it's C) collection. That's when data is gathered and labeled.
upvoted 0 times
...
Jaime
12 days ago
Reporting is just about presenting findings, not preserving data.
upvoted 0 times
...
Robt
17 days ago
Wait, are we sure about that? Seems off.
upvoted 0 times
...
Buffy
23 days ago
Agreed, collection is key for integrity!
upvoted 0 times
...
Cecily
28 days ago
I thought it was the examination phase.
upvoted 0 times
...
Rory
1 month ago
It's definitely the collection phase!
upvoted 0 times
...
Rosalind
1 month ago
Reporting seems too late for labeling and recording. I’m pretty confident it’s collection, but I wish I had reviewed that section more.
upvoted 0 times
...
Chu
1 month ago
I feel like the examination phase is where we analyze the data, not label it. So, I’m leaning towards collection for this one.
upvoted 0 times
...
Danilo
2 months ago
I remember a practice question that mentioned labeling data, and I think it was during the investigation phase. But I could be mixing it up.
upvoted 0 times
...
Evan
2 months ago
I think it might be the collection phase, but I'm not entirely sure. We talked about how important it is to preserve data during that step.
upvoted 0 times
...

Save Cancel