CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ38

VerifiedInformation System Auditing Process

Which of the following is the BEST method to help ensure that evidence from a computer forensics investigation is legally admissible?

Explanation

Forensic imaging creates a bit-for-bit duplicate for examination while preserving the original media as evidence. This protects evidence integrity and reduces the risk of altering the original; maintaining integrity is fundamental to evidence suitable for judicial proceedings.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!