CISSP Question #1373: Real Exam Question with Answer & Explanation

The correct answer is B: Authorization to collect. The analyst's first consideration when performing an investigation with the potential for legal action is authorization to collect. Authorization to collect is the process of obtaining the necessary permissions and approvals to collect the evidence from the relevant sources, such

Submitted by krish.m· Mar 5, 2026Security Operations

Question

When performing an investigation with the potential for legal action, what should be the analyst's FIRST consideration?

Options

AChain-of-custody
BAuthorization to collect
CCourt admissibility
DData decryption

Explanation

The analyst's first consideration when performing an investigation with the potential for legal action is authorization to collect. Authorization to collect is the process of obtaining the necessary permissions and approvals to collect the evidence from the relevant sources, such as the owners, custodians, or authorities. Authorization to collect is essential to ensure the legality, validity, and admissibility of the evidence, as well as to protect the rights and privacy of the parties involved. Authorization to collect can also prevent any legal or ethical issues that may arise from unauthorized or improper collection of evidence.

Topics

#digital forensics#legal considerations#authorization#evidence collection

Community Discussion

No community discussion yet for this question.

Full CISSP Practice Browse All CISSP Questions