220-1102 · Question #462
Which of the following helps ensure that a piece of evidence extracted from a PC is admissible in a court of law?
The correct answer is D. Chain of custody. To ensure evidence extracted from a PC is admissible in court, maintaining a meticulously documented chain of custody is essential, as it tracks every handler and action performed on the evidence from collection to presentation.
Question
Which of the following helps ensure that a piece of evidence extracted from a PC is admissible in a court of law?
Options
- AData integrity form
- BValid operating system license
- CDocumentation of an incident
- DChain of custody.
How the community answered
(38 responses)- A8% (3)
- B3% (1)
- C3% (1)
- D87% (33)
Why each option
To ensure evidence extracted from a PC is admissible in court, maintaining a meticulously documented chain of custody is essential, as it tracks every handler and action performed on the evidence from collection to presentation.
A data integrity form might record hash values or other data properties but is a component of maintaining chain of custody, not the complete process itself.
A valid operating system license is irrelevant to the admissibility of digital evidence in a legal proceeding.
Documentation of an incident is crucial for investigation but does not specifically cover the handling and preservation of evidence required for legal admissibility.
A chain of custody document meticulously records the collection, handling, transfer, analysis, and storage of evidence, ensuring its integrity and authenticity from the moment it is seized until it is presented in court. This verifiable record prevents tampering claims and establishes the evidence's trustworthiness.
Concept tested: Digital forensics evidence handling
Topics
Community Discussion
No community discussion yet for this question.