220-801 · Question #742
Which of the following does a technician need to do before giving a PC, which has been confiscated for prohibited activity, to another department?
The correct answer is B. Document change of custody. When handling confiscated equipment involved in a potential investigation, maintaining a proper chain of custody is critical. Before transferring the PC to another department, the technician must document the change of custody - recording who had the device, when it was…
Question
Which of the following does a technician need to do before giving a PC, which has been confiscated for prohibited activity, to another department?
Options
- AIdentify prohibited activity on PC
- BDocument change of custody
- CReport prohibited activity
- DPreserve data
How the community answered
(48 responses)- A4% (2)
- B88% (42)
- C6% (3)
- D2% (1)
Explanation
When handling confiscated equipment involved in a potential investigation, maintaining a proper chain of custody is critical. Before transferring the PC to another department, the technician must document the change of custody - recording who had the device, when it was transferred, and to whom. This preserves the legal integrity of any evidence on the device. While identifying prohibited activity, reporting it, and preserving data are all important steps, they would have already occurred before the transfer; documenting the handoff is the required action at the point of transfer.
Topics
Community Discussion
No community discussion yet for this question.