SSCP · Question #519
Which of the following would be MOST important to guarantee that the computer evidence will be admissible in court?
The correct answer is D. The chain of custody of the evidence must show who collected, secured, controlled, handled,. The chain of custody is MOST important for ensuring computer evidence is admissible in court. The chain of custody documents every person who collected, handled, secured, controlled, and transferred the evidence from the moment it was gathered to its presentation in court. A brok
Question
Options
- AIt must prove a fact that is immaterial to the case.
- BIts reliability must be proven.
- CThe process for producing it must be documented and repeatable.
- DThe chain of custody of the evidence must show who collected, secured, controlled, handled,
How the community answered
(29 responses)- A7% (2)
- C3% (1)
- D90% (26)
Explanation
The chain of custody is MOST important for ensuring computer evidence is admissible in court. The chain of custody documents every person who collected, handled, secured, controlled, and transferred the evidence from the moment it was gathered to its presentation in court. A broken or undocumented chain of custody allows the opposing party to argue the evidence was tampered with or contaminated, rendering it inadmissible. While reliability and repeatable processes (choices B and C) are also important for computer evidence, they are secondary to establishing an unbroken chain of custody. Choice A is incorrect because evidence must prove a material - not immaterial - fact.
Topics
Community Discussion
No community discussion yet for this question.