nerdexam
EC-CouncilEC-Council

312-49 · Question #490

312-49 Question #490: Real Exam Question with Answer & Explanation

The correct answer is A: Chain of custody form. A chain of custody form documents every person who handled a piece of evidence from collection through presentation in court, recording timestamps, signatures, and transfer details. It is the cornerstone document for maintaining evidence integrity and admissibility. A search warr

Submitted by ngozi_ng· Apr 18, 2026Computer Forensics Investigation Process

Question

What document does the screenshot represent?

Options

  • AChain of custody form
  • BSearch warrant form
  • CEvidence collection form
  • DExpert witness form

Explanation

A chain of custody form documents every person who handled a piece of evidence from collection through presentation in court, recording timestamps, signatures, and transfer details. It is the cornerstone document for maintaining evidence integrity and admissibility. A search warrant authorizes law enforcement to seize property; an evidence collection form logs what was collected at a scene; an expert witness form relates to courtroom testimony — all distinct from tracking custodial possession of evidence.

Topics

#Chain of Custody#Evidence Handling#Digital Forensics Process

Community Discussion

No community discussion yet for this question.

Full 312-49 PracticeBrowse All 312-49 Questions