312-49 · Question #37
Computer forensics report provides detailed information on complete computer forensics investigation process. It should explain how the incident occurred, provide technical details of the incident and
The correct answer is C. It is based on logical assumptions about the incident timeline. A forensic report must be based on verifiable facts, documented evidence, and scientifically sound methods - not on assumptions. If a report is based on 'logical assumptions about the incident timeline,' it introduces speculation, which undermines its credibility and objectivity.
Question
Computer forensics report provides detailed information on complete computer forensics investigation process. It should explain how the incident occurred, provide technical details of the incident and should be clear to understand. Which of the following attributes of a forensics report can render it inadmissible in a court of law?
Options
- AIt includes metadata about the incident
- BIt includes relevant extracts referred to In the report that support analysis or conclusions
- CIt is based on logical assumptions about the incident timeline
- DIt maintains a single document style throughout the text
How the community answered
(60 responses)- A2% (1)
- B5% (3)
- C85% (51)
- D8% (5)
Explanation
A forensic report must be based on verifiable facts, documented evidence, and scientifically sound methods - not on assumptions. If a report is based on 'logical assumptions about the incident timeline,' it introduces speculation, which undermines its credibility and objectivity. Courts require that forensic conclusions be reproducible and grounded in evidence. The other options describe good reporting practices: including metadata (A) provides context, including supporting extracts (B) strengthens conclusions, and maintaining a consistent document style (D) ensures clarity and professionalism.
Topics
Community Discussion
No community discussion yet for this question.