Which of the following would be MOST important to guarantee that the computer evidence will be admissible in
court?

This type of supporting evidence is used to help prove an idea or a point, however it cannot stand on its own, it
is used as a supplementary tool to help prove a primary piece of evidence. What is the name of this type of
evidence?

Which of the following proves or disproves a specific act through oral testimony based on information gathered
through the witness’s five senses?

A copy of evidence or oral description of its contents; which is not as reliable as best evidence is what type of
evidence?

What is called an exception to the search warrant requirement that allows an officer to conduct a search without
having the warrant in-hand if probable cause is present and destruction of the evidence is deemed imminent?

What is the PRIMARY reason to maintain the chain of custody on evidence that has been collected?

Which of the following would be LESS likely to prevent an employee from reporting an incident?

What is the PRIMARY goal of incident handling?

In the process of gathering evidence from a computer attack, a system administrator took a series of actions
which are listed below. Can you identify which one of these actions has compromised the whole evidence
collection process?

Which of the following cannot be undertaken in conjunction or while computer incident handling is ongoing?