Security Operations第 70 / 100 题
Which practice ensures evidence remains admissible by documenting who handled it and when?
a.Data retention
b.Legal hold
c.Nondisclosure
d.Chain of custody
解析
Chain of custody documents every person who handled evidence and each transfer, preserving integrity for legal proceedings. Gaps can render evidence inadmissible. It is essential in digital forensics and investigations.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- Which technology inspects data in motion and at rest to prevent unauthorized exfiltration of sensitive information?
- Which process applies vendor updates to fix known software vulnerabilities?
- Reducing a system's attack surface by disabling unneeded services and applying secure configurations is called:
- During forensic acquisition, why is a cryptographic hash taken of a disk image?
- Which type of backup captures only the data changed since the last full backup and does not clear the archive bit each time?
- Which metric defines the maximum acceptable amount of data loss measured in time?