nerdexam
EC-Council

312-49 · Question #471

When discussing the chain of custody in an investigation, what does a link refer to?

The correct answer is A. Someone that takes possession of a piece of evidence. In the context of chain of custody, a 'link' refers to any individual who takes possession of a piece of evidence at any point in time. Every time evidence changes hands - from the collecting officer, to the forensic examiner, to storage, to the lab - a new link is created…

Submitted by olafpl· Apr 18, 2026Computer Forensics Investigation Process

Question

When discussing the chain of custody in an investigation, what does a link refer to?

Options

  • ASomeone that takes possession of a piece of evidence
  • BEvidence that links one piece of evidence to another, like a usb cable
  • CThe most critical piece of evidence in an investigation
  • DThe transportation used when moving evidence

How the community answered

(35 responses)
  • A
    89% (31)
  • B
    3% (1)
  • C
    3% (1)
  • D
    6% (2)

Explanation

In the context of chain of custody, a 'link' refers to any individual who takes possession of a piece of evidence at any point in time. Every time evidence changes hands - from the collecting officer, to the forensic examiner, to storage, to the lab - a new link is created. Each link must be documented with who had the evidence, when they received it, and when they transferred it. A broken or undocumented link can invalidate the chain of custody and render evidence inadmissible in court.

Topics

#Chain of Custody#Evidence Handling#Forensic Investigation#Legal Process

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice