SY0-701 · Question #181
SY0-701 Question #181: Real Exam Question with Answer & Explanation
The correct answer is B: Chain of custody. Chain of custody is the process of documenting and preserving the integrity of evidence collected during an incident response. It involves recording the details of each person who handled the evidence, the time and date of each transfer, and the location where the evidence was st
Question
Which of the following incident response activities ensures evidence is properly handied?
Options
- AE-discovery
- BChain of custody
- CLegal hold
- DPreservation
Explanation
Chain of custody is the process of documenting and preserving the integrity of evidence collected during an incident response. It involves recording the details of each person who handled the evidence, the time and date of each transfer, and the location where the evidence was stored. Chain of custody ensures that the evidence is admissible in legal proceedings and can be traced back to its source. E-discovery, legal hold, and preservation are related concepts, but they do not ensure evidence is properly handled.
Community Discussion
No community discussion yet for this question.