IsacaIsaca
CISA · Question #463
CISA Question #463: Real Exam Question with Answer & Explanation
The correct answer is C: Professional collection of unaltered evidence. Ensuring evidence is gathered, preserved, and documented correctly - with its integrity and chain of custody intact - is essential for its admissibility in court and thus critical to successfully prosecuting a cyber-crime.
Submitted by akirajp· Apr 18, 2026Protection of Information Assets
Question
Which of the following is the MOST important consideration to facilitate prosecution of a perpetrator after a cyber crime?
Options
- AAn active intrusion detection system (IDS)
- BImmediate law enforcement involvement
- CProfessional collection of unaltered evidence
- DReporting to the internal legal department
Explanation
Ensuring evidence is gathered, preserved, and documented correctly - with its integrity and chain of custody intact - is essential for its admissibility in court and thus critical to successfully prosecuting a cyber-crime.
Topics
#Evidence Collection#Cybercrime Forensics#Legal Admissibility#Incident Response
Community Discussion
No community discussion yet for this question.