nerdexam
(ISC)2

CAP · Question #47

Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

The correct answer is A. Circumstantial. Circumstantial evidence consists of indirect facts or clues that, when combined, allow an investigator to logically infer a conclusion - but do not directly prove it on their own. For example, log files, access timestamps, and behavioral patterns are circumstantial. In contrast:

Assessment/Audit of Security and Privacy Controls

Question

Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

Options

  • ACircumstantial
  • BIncontrovertible
  • CDirect
  • DCorroborating

How the community answered

(19 responses)
  • A
    95% (18)
  • D
    5% (1)

Explanation

Circumstantial evidence consists of indirect facts or clues that, when combined, allow an investigator to logically infer a conclusion - but do not directly prove it on their own. For example, log files, access timestamps, and behavioral patterns are circumstantial. In contrast: Direct evidence (C) directly and explicitly proves a fact without inference (e.g., a recording of the act); Corroborating evidence (D) supports or strengthens existing evidence; and Incontrovertible evidence (B) is undeniable and conclusive by itself.

Topics

#Evidence types#Circumstantial evidence#Security investigations

Community Discussion

No community discussion yet for this question.

Full CAP Practice