ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 380 - 220-1102 discussion

Report
Export

An administrator responded to an incident where an employee copied financial data to a portable hard drive and then left the company with the dat a. The administrator documented the movement of the evidence. Which of the following concepts did the administrator demonstrate?

A.
Preserving chain of custody
Answers
A.
Preserving chain of custody
B.
Implementing data protection policies
Answers
B.
Implementing data protection policies
C.
Informing law enforcement
Answers
C.
Informing law enforcement
D.
Creating a summary of the incident
Answers
D.
Creating a summary of the incident
Suggested answer: A

Explanation:

Preserving chain of custody is a concept that refers to the documentation and tracking of who handled, accessed, modified, or transferred a piece of evidence, when, where, why, and how.

Preserving chain of custody can help establish the authenticity, integrity, and reliability of the evidence, as well as prevent tampering, alteration, or loss of the evidence. An administrator who documented the movement of the evidence demonstrated the concept of preserving chain of custody. Implementing data protection policies, informing law enforcement, and creating a summary of the incident are not concepts that describe the action of documenting the movement of the evidence.

asked 02/10/2024
Pieter Meiring
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first