nerdexam
EC-Council

312-49 · Question #193

How often must a company keep log files for them to be admissible in a court of law?

The correct answer is D. Continuously. For log files to be considered authentic and admissible as evidence in court, they must be maintained continuously without gaps. Courts look for an unbroken chain of custody and consistent logging practices. Selective or periodic logging (weekly, monthly) raises questions about…

Submitted by yuriko_h· Apr 18, 2026Computer Forensics in Today's World

Question

How often must a company keep log files for them to be admissible in a court of law?

Options

  • AAll log files are admissible in court no matter their frequency
  • BWeekly
  • CMonthly
  • DContinuously

How the community answered

(24 responses)
  • B
    8% (2)
  • C
    4% (1)
  • D
    88% (21)

Explanation

For log files to be considered authentic and admissible as evidence in court, they must be maintained continuously without gaps. Courts look for an unbroken chain of custody and consistent logging practices. Selective or periodic logging (weekly, monthly) raises questions about tampering, omission, or cherry-picking data. Continuous logging demonstrates that the records are generated systematically as part of standard business operations, which strengthens their legal admissibility and credibility as business records.

Topics

#Log Files#Admissibility of Evidence#Digital Evidence#Legal Requirements

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice