(ISC)2(ISC)2
SSCP · Question #922
SSCP Question #922: Real Exam Question with Answer & Explanation
Sign in or unlock SSCP to reveal the answer and full explanation for question #922. The question stem and answer options stay visible for context.
Submitted by paula_co· Apr 18, 2026Incident Response and Recovery
Question
When referring to a computer crime investigation, which of the following would be the MOST important step required in order to preserve and maintain a proper chain of custody of evidence:
Options
- AEvidence has to be collected in accordance with all laws and all legal regulations.
- BLaw enforcement officials should be contacted for advice on how and when to collect critical
- CVerifiable documentation indicating the who, what, when, where, and how the evidence was
- DLog files containing information regarding an intrusion are retained for at least as long as
Unlock SSCP to see the answer
You've previewed enough free SSCP questions. Unlock SSCP for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Chain of Custody#Digital Forensics#Evidence Handling#Incident Response