nerdexam
(ISC)2

SSCP · Question #1257

A critical element for investigators is to:

The correct answer is B. Follow investigative procedures. Following established investigative procedures is a critical element for investigators to ensure the integrity, admissibility, and overall success of an investigation.

Submitted by paula_co· Apr 18, 2026Incident Response and Recovery

Question

A critical element for investigators is to:

Options

  • AGather all evidence forensically.
  • BFollow investigative procedures.
  • CPreserve evidence under chain of custody.
  • DThoroughly analyze logs and user reports.

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    91% (39)
  • C
    2% (1)
  • D
    2% (1)

Why each option

Following established investigative procedures is a critical element for investigators to ensure the integrity, admissibility, and overall success of an investigation.

AGather all evidence forensically.

While gathering evidence forensically is important, it is a specific step *within* the broader investigative procedures, not the overarching critical element.

BFollow investigative procedures.Correct

Adhering to defined investigative procedures ensures that all actions taken are systematic, legally sound, and consistent, which is crucial for maintaining the credibility and admissibility of evidence in legal proceedings. These procedures guide the entire process from evidence collection to reporting, ensuring professionalism and accuracy.

CPreserve evidence under chain of custody.

Preserving evidence under chain of custody is a vital aspect of evidence handling, but it is also a component of following comprehensive investigative procedures, rather than the singular critical element.

DThoroughly analyze logs and user reports.

Thoroughly analyzing logs and user reports is an analytical task that is part of the investigation, but it does not encompass the entire critical framework of an investigation as 'following investigative procedures' does.

Concept tested: Importance of investigative procedures

Topics

#Investigative procedures#Incident response#Evidence handling

Community Discussion

No community discussion yet for this question.

Full SSCP Practice