nerdexam
(ISC)2

CCSP · Question #297

Your company has just been served with an eDiscovery order to collect event data and other pertinent information from your application during a specific period of time, to be used as potential evidenc

The correct answer is B. Chain of custody. For eDiscovery, maintaining a strict chain of custody is paramount to proving the authenticity and integrity of collected digital evidence, ensuring its admissibility in court.

Submitted by omar99· Apr 18, 2026Legal, Risk and Compliance

Question

Your company has just been served with an eDiscovery order to collect event data and other pertinent information from your application during a specific period of time, to be used as potential evidence for a court proceeding. Which of the following, apart from ensuring that you collect all pertinent data, would be the MOST important consideration? Response:

Options

  • AEncryption
  • BChain of custody
  • CCompression
  • DConfidentiality

How the community answered

(37 responses)
  • A
    11% (4)
  • B
    81% (30)
  • C
    3% (1)
  • D
    5% (2)

Why each option

For eDiscovery, maintaining a strict chain of custody is paramount to proving the authenticity and integrity of collected digital evidence, ensuring its admissibility in court.

AEncryption

While encryption is important for protecting data at rest and in transit, it is a security measure and not the primary concern for demonstrating the integrity and authenticity of evidence in a legal context.

BChain of custodyCorrect

Maintaining a strict chain of custody is the most important consideration for eDiscovery, as it meticulously documents the handling, transfer, and storage of digital evidence to prove its authenticity and integrity, ensuring its admissibility in court.

CCompression

Compression is a method for reducing file size and has no direct bearing on the legal admissibility or integrity of digital evidence.

DConfidentiality

Confidentiality is important for protecting sensitive data, but in eDiscovery, the priority shifts to preserving and proving the integrity and authenticity of the evidence, not just keeping it secret.

Concept tested: eDiscovery and chain of custody

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/overview-ediscovery-20?view=o365-worldwide

Topics

#eDiscovery#Chain of Custody#Legal Compliance#Evidence Handling

Community Discussion

No community discussion yet for this question.

Full CCSP Practice