312-49 · Question #251
In a computer forensics investigation, what describes the route that evidence takes from the time you find it until the case is closed or goes to court?
The correct answer is B. Chain of custody. Chain of custody is the documented, chronological trail that records who collected, handled, transferred, and analyzed evidence from the moment of discovery through the conclusion of the case. It is essential in digital forensics to prove that evidence has not been tampered…
Question
In a computer forensics investigation, what describes the route that evidence takes from the time you find it until the case is closed or goes to court?
Options
- APolicy of separation
- BChain of custody
- CRules of evidence
- DLaw of probability
How the community answered
(49 responses)- A6% (3)
- B90% (44)
- C2% (1)
- D2% (1)
Explanation
Chain of custody is the documented, chronological trail that records who collected, handled, transferred, and analyzed evidence from the moment of discovery through the conclusion of the case. It is essential in digital forensics to prove that evidence has not been tampered with or contaminated. A broken chain of custody can result in evidence being deemed inadmissible in court. The other options - policy of separation, rules of evidence, and law of probability - do not describe this tracking process.
Topics
Community Discussion
No community discussion yet for this question.