Which of the following is a problem regarding computer investigation issues?

A.
Information is tangible.

B.
Evidence is easy to gather.

C.
Computer-generated records are only considered secondary evidence, thus are not as reliable as best
evidence.

D.
In many instances, an expert or specialist is not required.

Explanation:
Computer-based evidence is typically considered hearsay evidence. Hearsay is second-hand evidence, as
opposed to direct evidence. Second-hand evidence is treated as less reliable.
Incorrect Answers:
A: Tangible information does not cause problem within an investigation.
B: Easily collected information would cause a problem.
D: During a computer investigation an expert or specialist could very well be required.

Stewart, James M., Ed Tittel, and Mike Chapple, CISSP: Certified Information Systems Security Professional
Study Guide, 5th Edition, Sybex, Indianapolis, 2011, p. 389