nerdexam
CompTIA

220-801 · Question #618

Chain of custody needs to be kept intact for which of the following reasons?

The correct answer is C. To ensure evidence is admissible in legal proceeding. Chain of custody documentation ensures that evidence handling meets the legal standards required for it to be accepted as valid in court proceedings.

Hardware and network troubleshooting

Question

Chain of custody needs to be kept intact for which of the following reasons?

Options

  • ATo ensure data preservation during evidence inspection
  • BTo ensure that the evidence is not left at the scene
  • CTo ensure evidence is admissible in legal proceeding
  • DTo ensure evidence is returned to proper owner

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    7% (2)
  • C
    87% (26)
  • D
    3% (1)

Why each option

Chain of custody documentation ensures that evidence handling meets the legal standards required for it to be accepted as valid in court proceedings.

ATo ensure data preservation during evidence inspection

Data preservation during inspection is addressed by forensic imaging and write-blocking techniques, not by chain of custody documentation itself.

BTo ensure that the evidence is not left at the scene

Ensuring evidence is not left at the scene is a collection responsibility handled during the initial evidence gathering phase, separate from the ongoing chain of custody process.

CTo ensure evidence is admissible in legal proceedingCorrect

Chain of custody is a chronological record documenting every person who collected, handled, transferred, or analyzed a piece of evidence. Courts require this documentation to verify that evidence has not been tampered with or contaminated between the time of collection and presentation at trial. Without an unbroken, documented chain of custody, a judge may rule the evidence inadmissible, undermining the entire legal case.

DTo ensure evidence is returned to proper owner

Returning evidence to its owner is a post-case property management step that is unrelated to the legal purpose chain of custody serves during an investigation and trial.

Concept tested: Chain of custody purpose in digital forensics

Source: https://learn.microsoft.com/en-us/compliance/assurance/assurance-forensic-investigation

Topics

#chain of custody#digital forensics#evidence handling#legal admissibility

Community Discussion

No community discussion yet for this question.

Full 220-801 Practice