nerdexam
GIAC

GCFA · Question #54

Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

The correct answer is B. Circumstantial. Circumstantial evidence is defined as a collection of facts that, when considered together, allow an investigator to infer a conclusion rather than directly proving it.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

Options

  • ACorroborating
  • BCircumstantial
  • CIncontrovertible
  • DDirect

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    82% (27)
  • C
    6% (2)
  • D
    9% (3)

Why each option

Circumstantial evidence is defined as a collection of facts that, when considered together, allow an investigator to infer a conclusion rather than directly proving it.

ACorroborating

Corroborating evidence supports or confirms other evidence already presented, rather than being itself a collection of facts used to infer a conclusion.

BCircumstantialCorrect

Circumstantial evidence consists of indirect facts or indicators that, when combined, lead to a reasonable inference about malicious activity or a suspect - it does not directly prove guilt but supports a logical conclusion through accumulation of related facts.

CIncontrovertible

Incontrovertible evidence is evidence so conclusive it cannot be disputed or denied, which is the opposite of indirect inferential evidence.

DDirect

Direct evidence directly proves a fact without requiring inference, such as an eyewitness account or a confession, and does not rely on combining multiple facts.

Concept tested: Types of digital forensic evidence - circumstantial

Source: https://www.eccouncil.org/cybersecurity-exchange/ethical-hacking/types-of-evidence-in-computer-forensics/

Topics

#circumstantial evidence#evidence types#digital forensics#forensic investigation

Community Discussion

No community discussion yet for this question.

Full GCFA Practice