220-801 · Question #407
Which of the following is the MOST important aspect of the chain of custody?
The correct answer is D. Documentation. Documentation is the most critical element of chain of custody because it creates the verifiable, chronological record needed to prove evidence was handled properly and remains legally admissible.
Question
Which of the following is the MOST important aspect of the chain of custody?
Options
- AReporting
- BPreservation
- CObservation
- DDocumentation
How the community answered
(23 responses)- A4% (1)
- C9% (2)
- D87% (20)
Why each option
Documentation is the most critical element of chain of custody because it creates the verifiable, chronological record needed to prove evidence was handled properly and remains legally admissible.
Reporting is a downstream activity that depends on documentation - you cannot produce a valid report without an underlying documented chain of custody.
Preservation of evidence is essential but serves no legal purpose if the handling of that evidence is not simultaneously documented to prove it was not tampered with.
Observation is part of the initial evidence gathering phase but is only actionable when the observations are formally recorded through documentation.
Chain of custody depends entirely on thorough documentation to be legally valid. Every person who handles the evidence, every transfer, and every action taken must be recorded with timestamps and signatures. Without this written record, the integrity of the evidence cannot be proven in court, making all other steps - collection, preservation, and reporting - meaningless without the documentation to support them.
Concept tested: Digital forensics chain of custody documentation
Source: https://www.comptia.org/certifications/a
Topics
Community Discussion
No community discussion yet for this question.