nerdexam
EC-Council

312-49 · Question #654

Examination of a computer by a technically unauthorized person will almost always result in:

The correct answer is A. Rendering any evidence found inadmissible in a court of law. In digital forensics and legal proceedings, proper authorization and a documented chain of custody are prerequisites for evidence admissibility. If an unauthorized person examines a computer - even if technically competent - they break the chain of custody and potentially…

Submitted by certguy· Apr 18, 2026Computer Forensics Investigation Process

Question

Examination of a computer by a technically unauthorized person will almost always result in:

Options

  • ARendering any evidence found inadmissible in a court of law
  • BCompletely accurate results of the examination
  • CThe chain of custody being fully maintained
  • DRendering any evidence found admissible in a court of law

How the community answered

(52 responses)
  • A
    88% (46)
  • B
    4% (2)
  • C
    6% (3)
  • D
    2% (1)

Explanation

In digital forensics and legal proceedings, proper authorization and a documented chain of custody are prerequisites for evidence admissibility. If an unauthorized person examines a computer - even if technically competent - they break the chain of custody and potentially contaminate or alter evidence without proper documentation. Defense attorneys can challenge such evidence as improperly obtained or tainted, leading courts to deem it inadmissible. This is a foundational principle of forensic investigation: it is not just about technical skill, but also about legal authority, documented procedures, and maintaining the integrity of the evidence from collection through presentation.

Topics

#Admissibility of Evidence#Forensic Procedures#Chain of Custody

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice