nerdexam
CompTIA

CAS-003 · Question #496

A corporate forensic investigator has been asked to acquire five forensic images of an employee database application. There are three images to capture in the United States, one in the United…

The correct answer is B. Privacy. The primary concern here is data privacy, particularly regarding cross-border transfer of personal data. Both the United Kingdom and Germany (as an EU member state) are subject to strict data protection regulations - the UK GDPR and the EU GDPR respectively. These regulations…

Risk Management

Question

A corporate forensic investigator has been asked to acquire five forensic images of an employee database application. There are three images to capture in the United States, one in the United Kingdom, and one in Germany. Upon completing the work, the forensics investigator saves the images to a local workstation. Which of the following types of concerns should the forensic investigator have about this work assignment?

Options

  • AEnvironmental
  • BPrivacy
  • CEthical
  • DCriminal

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    72% (21)
  • C
    14% (4)
  • D
    10% (3)

Explanation

The primary concern here is data privacy, particularly regarding cross-border transfer of personal data. Both the United Kingdom and Germany (as an EU member state) are subject to strict data protection regulations - the UK GDPR and the EU GDPR respectively. These regulations impose significant restrictions on the collection, processing, and international transfer of personal data, including employee data. Saving forensic images containing personal employee information from EU/UK jurisdictions onto a workstation in another jurisdiction without proper legal basis (such as Standard Contractual Clauses or adequacy decisions) could violate these privacy laws. The investigator must understand jurisdictional privacy requirements before transferring or storing the data. Environmental (A) and ethical (C) concerns are secondary at most. Criminal (D) concerns could arise as a consequence of privacy violations but privacy law compliance is the direct, primary concern.

Topics

#forensic investigation#cross-border data privacy#GDPR#legal compliance

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice