CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ982

Incident Management

Which of the following is MOST important during a forensic investigation?

  • A Capturing full system images
  • B Documenting analysis steps
  • C Maintaining a chain of custody
  • D Analyzing system memory
Explanation

Maintaining a chain of custody records every transfer, handler, and action involving evidence. This establishes that the evidence remained controlled and unaltered, supporting its integrity and admissibility.

Community Discussion

No comments yet. Be the first to start the discussion!