Which of the following is MOST important to ensure that electronic evidence collected during a forensic investigation will be admissible in future legal proceedings?
A.
Restricting evidence access to professionally certified forensic investigators
B.
Engaging an independent third party to perform the forensic investigation
C.
Performing investigative procedures on the original hard drives rather than images of the hard drives
D.
Documenting evidence handling by personnel throughout the forensic investigation
i think D is correct, because D is the chain of custody. If evidence is restricted to forensic investigators, but there is no documentation of who had accessed the evidence, the chain of custody is still not complete
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
bematv
Highly Voted 4 years, 1 month agoashleycc
Highly Voted 2 years, 9 months ago2e1f774
Most Recent 8 months, 2 weeks agostarzuu
1 year, 5 months agoJONESKA
1 year, 5 months agom4s7er
1 year, 11 months agoDavid_Hu
2 years agogomboragchaa
2 years agoDeeplaxmi
2 years, 3 months agoMunaM
2 years, 4 months ago