PrepAway - Latest Free Exam Questions & Answers

What attempts to show that evidence has been properly secured and controlled after having been acquired?

What attempts to show that evidence has been properly secured and controlled after having been acquired?

PrepAway - Latest Free Exam Questions & Answers

A.
Search warrant

B.
Integrity checksum

C.
Chain of custody

D.
Binary image

Explanation:
Answer C is correct; chain of custody is concerned with showing that evidence has been controlled after acquisition. Details will include all the people that handled the evidence as well as the person that controlled and secured the evidence.

Incorrect Answers and Explanations: A, B, and D: Answers A, B, and D are incorrect. A search warrant is a document that is used to ensure that evidence is acquired in a legal fashion. While integrity checksums can help to suggest that analysis did not cause changes to the original disk, it does not, strictly speaking, show that the evidence has been properly controlled in a secure fashion. A binary image is simply an exact bit by bit copy of a disk, but does not necessarily imply secured and controlled evidence.

One Comment on “What attempts to show that evidence has been properly secured and controlled after having been acquired?


Leave a Reply