Security OperationsQuestion 70 of 100
Which practice ensures evidence remains admissible by documenting who handled it and when?
a.Data retention
b.Legal hold
c.Nondisclosure
d.Chain of custody
Explanation
Chain of custody documents every person who handled evidence and each transfer, preserving integrity for legal proceedings. Gaps can render evidence inadmissible. It is essential in digital forensics and investigations.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which technology inspects data in motion and at rest to prevent unauthorized exfiltration of sensitive information?
- Which process applies vendor updates to fix known software vulnerabilities?
- Reducing a system's attack surface by disabling unneeded services and applying secure configurations is called:
- During forensic acquisition, why is a cryptographic hash taken of a disk image?
- Which type of backup captures only the data changed since the last full backup and does not clear the archive bit each time?
- Which metric defines the maximum acceptable amount of data loss measured in time?
Last reviewed: · editorial process
Sen Lin, PrepPass Founder · Verified against CompTIA Security+ (SY0-701) · How we review