nerdexam
(ISC)2

SSCP · Question #410

Once evidence is seized, a law enforcement officer should emphasize which of the following?

The correct answer is B. Chain of custody. Chain of custody is the documented, chronological record of who collected, handled, transferred, analyzed, and stored evidence from the point of seizure to its presentation in court. Maintaining an unbroken chain of custody is critical to proving that evidence has not been tamper

Submitted by neha2k· Apr 18, 2026Incident Response and Recovery

Question

Once evidence is seized, a law enforcement officer should emphasize which of the following?

Options

  • AChain of command
  • BChain of custody
  • CChain of control
  • DChain of communications

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    88% (21)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Chain of custody is the documented, chronological record of who collected, handled, transferred, analyzed, and stored evidence from the point of seizure to its presentation in court. Maintaining an unbroken chain of custody is critical to proving that evidence has not been tampered with or contaminated. If the chain of custody is broken or poorly documented, defense attorneys can challenge the integrity of the evidence, potentially rendering it inadmissible. Chain of command (A) refers to organizational hierarchy. Chain of control (C) and chain of communications (D) are not standard legal/forensic terms in this context.

Topics

#Chain of custody#Evidence handling#Digital forensics#Incident response

Community Discussion

No community discussion yet for this question.

Full SSCP Practice