nerdexam
CompTIA

SY0-701 · Question #181

Which of the following incident response activities ensures evidence is properly handied?

The correct answer is B. Chain of custody. Chain of custody is the process of documenting and preserving the integrity of evidence collected during an incident response. It involves recording the details of each person who handled the evidence, the time and date of each transfer, and the location where the evidence was…

Submitted by mateo_ar· Mar 6, 2026Security Operations

Question

Which of the following incident response activities ensures evidence is properly handied?

Options

  • AE-discovery
  • BChain of custody
  • CLegal hold
  • DPreservation

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    91% (31)
  • C
    3% (1)

Explanation

Chain of custody is the process of documenting and preserving the integrity of evidence collected during an incident response. It involves recording the details of each person who handled the evidence, the time and date of each transfer, and the location where the evidence was stored. Chain of custody ensures that the evidence is admissible in legal proceedings and can be traced back to its source. E-discovery, legal hold, and preservation are related concepts, but they do not ensure evidence is properly handled.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice