220-801 · Question #618
Chain of custody needs to be kept intact for which of the following reasons?
The correct answer is C. To ensure evidence is admissible in legal proceeding. Chain of custody documentation ensures that evidence handling meets the legal standards required for it to be accepted as valid in court proceedings.
Question
Chain of custody needs to be kept intact for which of the following reasons?
Options
- ATo ensure data preservation during evidence inspection
- BTo ensure that the evidence is not left at the scene
- CTo ensure evidence is admissible in legal proceeding
- DTo ensure evidence is returned to proper owner
How the community answered
(30 responses)- A3% (1)
- B7% (2)
- C87% (26)
- D3% (1)
Why each option
Chain of custody documentation ensures that evidence handling meets the legal standards required for it to be accepted as valid in court proceedings.
Data preservation during inspection is addressed by forensic imaging and write-blocking techniques, not by chain of custody documentation itself.
Ensuring evidence is not left at the scene is a collection responsibility handled during the initial evidence gathering phase, separate from the ongoing chain of custody process.
Chain of custody is a chronological record documenting every person who collected, handled, transferred, or analyzed a piece of evidence. Courts require this documentation to verify that evidence has not been tampered with or contaminated between the time of collection and presentation at trial. Without an unbroken, documented chain of custody, a judge may rule the evidence inadmissible, undermining the entire legal case.
Returning evidence to its owner is a post-case property management step that is unrelated to the legal purpose chain of custody serves during an investigation and trial.
Concept tested: Chain of custody purpose in digital forensics
Source: https://learn.microsoft.com/en-us/compliance/assurance/assurance-forensic-investigation
Topics
Community Discussion
No community discussion yet for this question.