(ISC)2(ISC)2
SSCP · Question #1090
SSCP Question #1090: Real Exam Question with Answer & Explanation
The correct answer is B: Preserve electronic evidence and protect it from any alteration. The ultimate goal of a computer forensics specialist is to ensure that electronic evidence is acquired and preserved without any alteration, maintaining its integrity for legal purposes.
Submitted by layla.eg· Apr 18, 2026Incident Response and Recovery
Question
The ultimate goal of a computer forensics specialist is to ___________________.
Options
- ATestify in court as an expert witness
- BPreserve electronic evidence and protect it from any alteration
- CProtect the company's reputation
- DInvestigate the computer crime
Explanation
The ultimate goal of a computer forensics specialist is to ensure that electronic evidence is acquired and preserved without any alteration, maintaining its integrity for legal purposes.
Common mistakes.
- A. Testifying in court is a potential responsibility, but it is a consequence of successful forensic work, not the primary goal of the technical preservation process.
- C. Protecting a company's reputation is a business objective that may benefit from forensic investigation but is not the specific ultimate goal of the forensics specialist's technical role.
- D. Investigating the computer crime is a broader process that the forensic specialist contributes to, but their specific ultimate goal centers on the integrity and handling of the evidence itself.
Concept tested. Computer forensics principles - Evidence preservation
Topics
#Digital Forensics#Evidence Preservation#Incident Response
Community Discussion
No community discussion yet for this question.