SSCP: Systems Security Certified PractitionerDemo

Question

Which of the following is MOST important to ensure that computer evidence will be admissible in court?

A It must prove a fact that is immaterial to the case.
B Its reliability must be proven.
C The process for producing it must be documented and repeatable.
D The chain of custody of the evidence must show who collected, secured, controlled, handled, transported the evidence, and that it was not tampered with.

Explanation

A complete chain of custody establishes who collected, secured, controlled, handled, and transported the evidence, and demonstrates that it was not tampered with. This supports the evidence’s authenticity and integrity for admission in court.

SSCP: Systems Security Certified PractitionerDemo

AstroTutor

Notes

Readiness

QuestionQ680

Community Discussion