GIAC
GCFA · Question #213
Which of the following needs to be documented to preserve evidences for presentation in court?
Sign in or unlock GCFA to reveal the answer and full explanation for question #213. The question stem and answer options stay visible for context.
Advanced Incident Response & Digital Forensics Fundamentals
Question
Which of the following needs to be documented to preserve evidences for presentation in court?
Options
- ASeparation of duties
- BIncident response policy
- CChain of custody
- DAccount lockout policy
Unlock GCFA to see the answer
You've previewed enough free GCFA questions. Unlock GCFA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#chain of custody#evidence preservation#court admissibility#documentation