312-39V2: Certified SOC Analyst v2Demo

By ECCouncil · Question Mode

QuestionQ136

Forensics Investigation and Malware Analysis

According to the forensic investigation process, what step is performed immediately after evidence is collected?

  • A Call Organizational Disciplinary Team
  • B Send it to the nearby police station
  • C Set a Forensic lab
  • D Create a Chain of Custody Document
Explanation

A chain-of-custody document establishes the chronological record of who collected, handled, transferred, and stored evidence. Maintaining this record from collection onward preserves the evidence’s integrity and supports its admissibility.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!