nerdexam
(ISC)2

SSCP · Question #1090

The ultimate goal of a computer forensics specialist is to ___________________.

The correct answer is B. Preserve electronic evidence and protect it from any alteration. The ultimate goal of a computer forensics specialist is to ensure that electronic evidence is acquired and preserved without any alteration, maintaining its integrity for legal purposes.

Submitted by layla.eg· Apr 18, 2026Incident Response and Recovery

Question

The ultimate goal of a computer forensics specialist is to ___________________.

Options

  • ATestify in court as an expert witness
  • BPreserve electronic evidence and protect it from any alteration
  • CProtect the company's reputation
  • DInvestigate the computer crime

How the community answered

(37 responses)
  • B
    95% (35)
  • C
    3% (1)
  • D
    3% (1)

Why each option

The ultimate goal of a computer forensics specialist is to ensure that electronic evidence is acquired and preserved without any alteration, maintaining its integrity for legal purposes.

ATestify in court as an expert witness

Testifying in court is a potential responsibility, but it is a consequence of successful forensic work, not the primary goal of the technical preservation process.

BPreserve electronic evidence and protect it from any alterationCorrect

A computer forensics specialist's paramount objective is to secure and maintain the exact, unaltered state of digital evidence. This meticulous preservation ensures that the evidence remains admissible in court and accurately reflects the original data, preventing contamination or tampering that could invalidate findings.

CProtect the company's reputation

Protecting a company's reputation is a business objective that may benefit from forensic investigation but is not the specific ultimate goal of the forensics specialist's technical role.

DInvestigate the computer crime

Investigating the computer crime is a broader process that the forensic specialist contributes to, but their specific ultimate goal centers on the integrity and handling of the evidence itself.

Concept tested: Computer forensics principles - Evidence preservation

Topics

#Digital Forensics#Evidence Preservation#Incident Response

Community Discussion

No community discussion yet for this question.

Full SSCP Practice