When cataloging digital evidence, the primary goal is to

The correct answer is B. Preserve evidence integrity. The overarching principle of digital forensics is maintaining the integrity of evidence so it remains admissible in court. Bit-stream imaging (A) is a technique used to achieve that goal, not the goal itself. Leaving evidence at the scene (C) or keeping the computer on (D) are si

Submitted by tarun92· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

AMake bit-stream images of all hard drives
BPreserve evidence integrity
CNot remove the evidence from the scene
DNot allow the computer to be turned off

How the community answered

(58 responses)

A
2% (1)
B
95% (55)
D
3% (2)

Explanation

The overarching principle of digital forensics is maintaining the integrity of evidence so it remains admissible in court. Bit-stream imaging (A) is a technique used to achieve that goal, not the goal itself. Leaving evidence at the scene (C) or keeping the computer on (D) are situational considerations, not primary objectives. Every step in evidence cataloging - hashing, chain of custody, write-blocking - exists to serve the single goal of proving the evidence was not altered.

Topics

#Evidence Preservation#Digital Evidence Integrity#Forensic Fundamentals

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice