When marking evidence that has been collected with the aa/ddmmyy/nnnn/zz format, what does the nnn denote?

The correct answer is D. The sequential number of the exhibits seized. In the evidence labeling format aa/ddmmyy/nnnn/zz: 'aa' represents the initials of the investigating officer, 'ddmmyy' is the date the evidence was seized, 'nnnn' is the sequential number of the exhibits seized (uniquely identifying each piece of evidence in the order it was…

Submitted by obi.ng· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

AThe year the evidence was taken
BThe sequence number for the parts of the same exhibit
CThe initials of the forensics analyst
DThe sequential number of the exhibits seized

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
6% (2)
D
88% (28)

Explanation

In the evidence labeling format aa/ddmmyy/nnnn/zz: 'aa' represents the initials of the investigating officer, 'ddmmyy' is the date the evidence was seized, 'nnnn' is the sequential number of the exhibits seized (uniquely identifying each piece of evidence in the order it was collected), and 'zz' denotes the sequence number for parts belonging to the same exhibit (e.g., multiple disks from the same machine). The nnnn field therefore distinguishes each discrete exhibit from all others seized in the investigation.

Topics

#Evidence Marking#Forensic Procedures#Evidence Handling

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice