Same question with Q106.
Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide by Omar Santos P570
- You do not use Tampered images in an investigation. They would be useless in Court. We preserve the evidence.
- Evidence in cybersecurity investigations that go to court is used to prove (or disprove) facts that are in dispute, as well as to prove the credibility of disputed facts (in particular, circumstantial evidence or indirect evidence).
- Digital forensics evidence provides implications and extrapolations that may assist in proving some key fact of the case.
- Such evidence helps legal teams and the court develop reliable hypotheses or theories as to the committer of the crime (threat actor).
- The reliability of the evidence is vital to supporting or refuting any hypothesis put forward, including the attribution of threat actors.
I see the correct answer is C and E, because the tampered evidence should not be used in investigations
upvoted 4 times
...
This section is not available anymore. Please use the main Exam Page.200-201 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
MaliDong
Highly Voted 1 year, 7 months agoSecurityGuy
Most Recent 9 months, 2 weeks agocy_analyst
1 year, 7 months agoEng_ahmedyoussef
1 year, 8 months agomoali012
1 year, 8 months ago