What is the "Best Evidence Rule"?

The correct answer is A. It states that the court only allows the original evidence of a document, photograph, or recording. The Best Evidence Rule (also called the Original Writing Rule) is a legal doctrine that requires the original version of a document, photograph, or recording to be presented as evidence in court rather than a copy, unless the original is unavailable for a justified reason. In dig

Submitted by rachelw· Apr 18, 2026Computer Forensics in Today's World

Question

Options

AIt states that the court only allows the original evidence of a document, photograph, or recording
BIt contains system time, logged-on user(s), open files, network information, process information,
CIt contains hidden files, slack space, swap file, index.dat files, unallocated clusters, unused
DIt contains information such as open network connection, user logout, programs that reside in

How the community answered

(19 responses)

A
89% (17)
B
5% (1)
C
5% (1)

Explanation

The Best Evidence Rule (also called the Original Writing Rule) is a legal doctrine that requires the original version of a document, photograph, or recording to be presented as evidence in court rather than a copy, unless the original is unavailable for a justified reason. In digital forensics, this means that the original storage media or a forensically verified bit-for-bit image (with a verified hash) must be presented. Options B, C, and D describe categories of volatile data, deleted/hidden data, and network connection data - not legal rules of evidence.

Topics

#Best Evidence Rule#Legal Aspects of Forensics#Evidence Admissibility#Forensic Principles

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice