CISSP · Question #568
Which of the following is the key requirement for test results when implementing forensic procedures?
The correct answer is D. The test results must be reproducible.. In digital forensics, the integrity of the investigation depends on the ability to reproduce test results, ensuring findings are valid, defensible, and admissible in legal proceedings.
Question
Options
- AThe test results must be cost-effective.
- BThe test result must be authorized.
- CThe test results must be quantifiable.
- DThe test results must be reproducible.
How the community answered
(53 responses)- A2% (1)
- B4% (2)
- C2% (1)
- D92% (49)
Why each option
In digital forensics, the integrity of the investigation depends on the ability to reproduce test results, ensuring findings are valid, defensible, and admissible in legal proceedings.
Cost-effectiveness is a project management concern, not a scientific or legal requirement for forensic test validity or admissibility.
While authorization is important for conducting forensic investigations legally, it is a procedural prerequisite rather than a key requirement for the integrity of the test results themselves.
Quantifiability refers to measurable outcomes, but forensic results are not required to be numeric or quantifiable - they must instead be reproducible and verifiable to withstand legal scrutiny.
Reproducibility is a foundational principle of forensic science - results must be independently verifiable by a third party using the same methods and evidence. This ensures scientific validity, maintains chain of custody integrity, and makes findings admissible and credible in court or legal proceedings. Without reproducibility, forensic conclusions can be challenged and invalidated.
Concept tested: Forensic investigation principles and evidence integrity
Source: https://www.nist.gov/system/files/documents/forensics/11-Body_of_Knowledge.pdf
Topics
Community Discussion
No community discussion yet for this question.