nerdexam
EC-Council

212-89 · Question #166

212-89 Question #166: Real Exam Question with Answer & Explanation

The correct answer is B. Software version information and web application source code. In the practice of digital forensics and incident handling, evidence bags play a crucial role in preserving the integrity and chain of custody of physical and digital evidence. The information typically included in the documentation on evidence bags encompasses the date and time

Question

Which of the following details are included in the evidence bags?

Options

  • AError messages that contain sensitive information and files containing passworos
  • BSoftware version information and web application source code
  • CSensitive cirectories, personal, and organizational email adcress
  • DDate and time of seizure, exhibit number, anc name of incident responder

Explanation

In the practice of digital forensics and incident handling, evidence bags play a crucial role in preserving the integrity and chain of custody of physical and digital evidence. The information typically included in the documentation on evidence bags encompasses the date and time of seizure, which provides a timestamp for when the evidence was collected; the exhibit number, which is a unique identifier assigned to each piece of evidence for tracking and reference purposes; and the name of the incident responder or individual who collected the evidence, ensuring accountability and traceability. This documentation is essential for maintaining the chain of custody, a critical element in legal proceedings, as it helps establish the evidence's authenticity and integrity by detailing its handling from collection to presentation in court. Options A, B, and C describe types of digital evidence but are not directly related to the content typically documented on evidence bags.

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice