nerdexam
EC-Council

312-49V11 · Question #150

John, a Forensic Lab Director, is planning to strengthen the security measures of his lab to maintain the trustworthiness and integrity of their investigations. He also wants to ensure that the…

The correct answer is C. Instituting a physical lab surveillance system with guards around the premises and designating a. The issue is role assignment: combining Incident Analyzer, Evidence Documenter, and Evidence Manager into one person violates separation of duties and increases the risk of bias, errors, and chain-of-custody challenges. Security guards and surveillance are fine, but the role…

Computer Forensics Investigation Process

Question

John, a Forensic Lab Director, is planning to strengthen the security measures of his lab to maintain the trustworthiness and integrity of their investigations. He also wants to ensure that the forensics team members are assigned specific roles to streamline the investigation process. Given the following list of security measures and team roles, which combination should he NOT consider?

Options

  • AEstablishing a fire safety protocol with trained personnel and assigning the role of Photographer to
  • BInstallation of a TEMPEST system to shield workstations from electromagnetic signals and
  • CInstituting a physical lab surveillance system with guards around the premises and designating a
  • DProviding an electronic sign-in log for visitors and assigning the role of Evidence Examiner to sort

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    12% (5)
  • C
    79% (33)
  • D
    7% (3)

Explanation

The issue is role assignment: combining Incident Analyzer, Evidence Documenter, and Evidence Manager into one person violates separation of duties and increases the risk of bias, errors, and chain-of-custody challenges. Security guards and surveillance are fine, but the role consolidation

Topics

#forensic lab security#TEMPEST#physical security#lab role assignment

Community Discussion

No community discussion yet for this question.

Full 312-49V11 Practice