When marking evidence that has been collected with the "aaa/ddmmyy/nnnn/zz" format, what does the "nnnn" denote?

The correct answer is D. The sequential number of the exhibits seized by the analyst. In the evidence labeling format 'aaa/ddmmyy/nnnn/zz': 'aaa' = initials of the forensics analyst; 'ddmmyy' = date the evidence was collected (day/month/year); 'nnnn' = sequential number of the exhibits seized by the analyst (a running count of all items seized); 'zz' = sequence…

Submitted by ashley.k· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

AThe initials of the forensics analyst
BThe sequence number for the parts of the same exhibit
CThe year he evidence was taken
DThe sequential number of the exhibits seized by the analyst

How the community answered

(38 responses)

A
3% (1)
C
5% (2)
D
92% (35)

Explanation

In the evidence labeling format 'aaa/ddmmyy/nnnn/zz': 'aaa' = initials of the forensics analyst; 'ddmmyy' = date the evidence was collected (day/month/year); 'nnnn' = sequential number of the exhibits seized by the analyst (a running count of all items seized); 'zz' = sequence number for parts of the same exhibit (e.g., if one exhibit has multiple parts, this differentiates them). So 'nnnn' tracks how many total exhibits have been collected, while 'zz' tracks parts within a single exhibit. This distinction is critical for proper chain-of-custody documentation.

Topics

#Evidence marking#Evidence handling#Forensic procedures#Chain of custody

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice