312-49 Question #466: Real Exam Question with Answer & Explanation

Question

You are working as an investigator for a corporation and you have just received instructions from your manager to assist in the collection of 15 hard drives that are part of an ongoing investigation. Your job is to complete the required evidence custody forms to properly document each piece of evidence as other members of your team collect it. Your manager instructs you to complete one multi-evidence form for the entire case and a single-evidence form for each hard drive. How will these forms be stored to help preserve the chain of custody of the case?

Options

• AAll forms should be placed in an approved secure container because they are now primary
• BThe multi-evidence form should be placed in an approved secure container with the hard drives
• CAll forms should be placed in the report file because they are now primary evidence in the case
• DThe multi-evidence form should be placed in the report file and the single-evidence forms should