nerdexam
CompTIA

220-1102 · Question #361

The courts determined that a cybercrimes case could no longer be prosecuted due to the agency's handling of evidence. Which of the following was MOST likely violated during the investigation?

The correct answer is C. Chain of custody. The inability to prosecute a cybercrimes case due to evidence handling indicates a violation of the chain of custody.

Operational Procedures

Question

The courts determined that a cybercrimes case could no longer be prosecuted due to the agency's handling of evidence. Which of the following was MOST likely violated during the investigation?

Options

  • AOpen-source software
  • BEULA
  • CChain of custody
  • DAUP

How the community answered

(67 responses)
  • A
    6% (4)
  • B
    1% (1)
  • C
    90% (60)
  • D
    3% (2)

Why each option

The inability to prosecute a cybercrimes case due to evidence handling indicates a violation of the chain of custody.

AOpen-source software

Open-source software refers to software with publicly accessible source code and is unrelated to legal procedures for handling evidence.

BEULA

A EULA (End User License Agreement) is a contract between the licensor and purchaser of software, which is not pertinent to the proper handling of evidence in a criminal investigation.

CChain of custodyCorrect

The chain of custody is a critical forensic principle that documents the chronological history of evidence, showing its seizure, custody, control, transfer, analysis, and disposition. Violations of this chain can compromise the integrity and admissibility of evidence in court, leading to cases being dismissed.

DAUP

An AUP (Acceptable Use Policy) defines rules for using an organization's resources and does not govern the legal collection and preservation of evidence.

Concept tested: Digital forensics evidence handling

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf

Topics

#Chain of custody#Evidence handling#Digital forensics#Cybercrime investigation

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice