# CS0-001 — Question 424

**Type:** multiple_choice
**Topics:** topic_1

## Question

A security analyst received a compromised workstation. The workstation's hard drive may contain evidence of criminal activities. Which of the following is the
FIRST thing the analyst must do to ensure the integrity of the hard drive while performing the analysis?

## Correct Answer

_See scenario._

## Explanation

This question was in the exam :)

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/comptia/CS0-001/424  
Practice (tracked): https://hiexam.net/study/CS0-001/practice