nerdexam
EC-Council

312-49 · Question #611

Jacob is a computer forensics investigator with over 10 years of experience in investigations and has written over 50 articles on computer forensics. He has been called upon as a qualified witness…

The correct answer is D. Authentication. In a legal context, authentication refers to the process of establishing that a piece of evidence is genuine, accurate, and has not been tampered with. When an expert witness like Jacob testifies about the accuracy and integrity of log files, they are authenticating that…

Submitted by mateo_ar· Apr 18, 2026Computer Forensics Investigation Process

Question

Jacob is a computer forensics investigator with over 10 years of experience in investigations and has written over 50 articles on computer forensics. He has been called upon as a qualified witness to testify the accuracy and integrity of the technical log files gathered in an investigation into computer fraud. What is the term used for Jacob's testimony in this case?

Options

  • ACertification
  • BJustification
  • CReiteration
  • DAuthentication

How the community answered

(55 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    2% (1)
  • D
    91% (50)

Explanation

In a legal context, authentication refers to the process of establishing that a piece of evidence is genuine, accurate, and has not been tampered with. When an expert witness like Jacob testifies about the accuracy and integrity of log files, they are authenticating that evidence for the court. Under rules of evidence (e.g., FRE Rule 901), digital evidence must be authenticated before it can be admitted. This is distinct from certification (a credential or formal approval), justification (providing reasons for an action), and reiteration (simply repeating information). Authentication by a qualified expert is a foundational requirement in digital forensics for evidence admissibility.

Topics

#Expert Witness Testimony#Evidence Authentication#Legal Procedures#Evidence Integrity

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice