Which of the following are characteristics of electronic Evidence?

The correct answer is C. Should follow proper chain of custody. Chain of custody (C) is a fundamental requirement for all evidence, including electronic evidence - it documents who handled the evidence, when, and how, ensuring its integrity and admissibility in court. A is wrong because electronic evidence is actually highly susceptible to…

Question

Options

ACannot be easily altered
BIs not time sensitive
CShould follow proper chain of custody
DMust be decrypted

How the community answered

(26 responses)

A
4% (1)
B
4% (1)
C
81% (21)
D
12% (3)

Explanation

Chain of custody (C) is a fundamental requirement for all evidence, including electronic evidence - it documents who handled the evidence, when, and how, ensuring its integrity and admissibility in court.

A is wrong because electronic evidence is actually highly susceptible to alteration; it can be modified, deleted, or corrupted with minimal effort, which is precisely why proper handling procedures matter. B is wrong because electronic evidence is extremely time sensitive - logs, metadata, and volatile data (like RAM contents) can disappear or be overwritten quickly after an incident. D is wrong because not all electronic evidence is encrypted; decryption may sometimes be necessary, but it is not a universal characteristic.

Memory tip: Think of the "3 C's of evidence" - Collect, Custody, Court. Chain of custody is the thread connecting collection to courtroom, and it applies to every piece of evidence regardless of format.

Community Discussion

No community discussion yet for this question.

Full II0-001 Practice