CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ82

VerifiedProtection of Information Assets

Which of the following actions would invalidate the authenticity of digital evidence during a forensic investigation?

Explanation

Digital evidence must be preserved without altering the original media. Installing forensic software on the original drive writes data to it and changes the evidence, undermining its authenticity and integrity.

Community Discussion

No comments yet. Be the first to start the discussion!