Exam CAS-004 topic 1 question 108 discussion

Actual exam question from CompTIA's CAS-004

Question #: 108
Topic #: 1

A local government that is investigating a data exfiltration claim was asked to review the fingerprint of the malicious user's actions. An investigator took a forensic image of the VM and downloaded the image to a secured USB drive to share with the government.
Which of the following should be taken into consideration during the process of releasing the drive to the government?

A. Encryption in transit
B. Legal issues
C. Chain of custody
D. Order of volatility
E. Key exchange

Show Suggested Answer

Suggested Answer: C 🗳️

by BreakOff874 at April 22, 2023, 9:07 p.m.

Comments

Submit Cancel

bobsmith69

9 months, 3 weeks ago

Selected Answer: C

Chain of custody 100%

upvoted 2 times

...

Meep123

10 months, 3 weeks ago

C. The words government and investigator make me believe this will involve legal processes, which Chain of Custody is crucial for evidence viability in court.

upvoted 3 times

...

BiteSize

1 year ago

Selected Answer: C

Chain of Custody (CoC) is equally as crucial as preserving evidence. Without proper documentation of the CoC, there is no way of preserving the evidence. Source: Verifying each answer against Chat GPT, my experience, other test banks, a written book, and weighing in the discussion from all users to create a 100% accurate guide for myself before I take the exam. (It isn't easy because of the time needed, but it is doing my diligence)

upvoted 3 times

...

BreakOff874

1 year, 3 months ago

Selected Answer: C

It is important to maintain the chain of custody to ensure that the evidence is not tampered with, and the authenticity and integrity of the forensic image are preserved. The investigator should document the time and date of the image creation, the names of the individuals who have handled the drive, and any other pertinent information.

upvoted 2 times

...