SSCP · Question #921
In order to be able to successfully prosecute an intruder:
The correct answer is B. A proper chain of custody of evidence has to be preserved. If you intend on prosecuting an intruder, evidence has to be collected in a lawful manner and, most importantly, protected through a secure chain-of-custody procedure that tracks who has been involved in handling the evidence and where it has been stored. All other choices are…
Question
In order to be able to successfully prosecute an intruder:
Options
- AA point of contact should be designated to be responsible for communicating with law
- BA proper chain of custody of evidence has to be preserved.
- CCollection of evidence has to be done following predefined procedures.
- DWhenever possible, analyze a replica of the compromised resource, not the original, thereby
How the community answered
(37 responses)- A3% (1)
- B86% (32)
- C8% (3)
- D3% (1)
Explanation
If you intend on prosecuting an intruder, evidence has to be collected in a lawful manner and, most importantly, protected through a secure chain-of-custody procedure that tracks who has been involved in handling the evidence and where it has been stored. All other choices are all important points, but not the best answer, since no prosecution is possible without a proper, provable chain of custody of evidence.
Topics
Community Discussion
No community discussion yet for this question.