nerdexam
EC-Council

312-49V11 · Question #155

An experienced computer forensics investigator, Vince, was tasked with examining digital evidence associated with a serious corporate cybercrime. He successfully seized and bagged the evidence but…

The correct answer is A. Ensuring the evidence bag's panel contains the name of the officer who prepared the crime scene. Environmental protection (cool/dry), avoiding magnets, and preventing wireless connectivity (Faraday/signal-blocking) all directly protect evidence integrity. The name of the officer who prepared a crime scene sketch is not a transportation integrity control for the digital…

Computer Forensics Investigation Process

Question

An experienced computer forensics investigator, Vince, was tasked with examining digital evidence associated with a serious corporate cybercrime. He successfully seized and bagged the evidence but faced logistical difficulties and workforce concerns for its onsite examination. He decided to transport the evidence to the lab for further analysis. In light of his decision, which of the following precautions is the least relevant to ensure the integrity of the evidence during its transportation?

Options

  • AEnsuring the evidence bag's panel contains the name of the officer who prepared the crime scene
  • BStoring the electronic evidence in a cool, moisture-free environment
  • CKeeping the collected electronic evidence away from magnetic sources like speaker magnets
  • DStoring wireless or portable devices in signal-blocking containers to prevent them from connecting

How the community answered

(19 responses)
  • A
    74% (14)
  • B
    5% (1)
  • C
    5% (1)
  • D
    16% (3)

Explanation

Environmental protection (cool/dry), avoiding magnets, and preventing wireless connectivity (Faraday/signal-blocking) all directly protect evidence integrity. The name of the officer who prepared a crime scene sketch is not a transportation integrity control for the digital evidence itself, making it the least relevant.

Topics

#evidence transportation#chain of custody#electronic evidence handling#evidence integrity

Community Discussion

No community discussion yet for this question.

Full 312-49V11 Practice