Which of the following best practices is MOST important to document throughout the process to maintain integrity of the findings?

Following an incident, an administrator is gathering forensic evidence from a server for a human resources investigation. Which of the following best practices is MOST important to document throughout the process to maintain integrity of the findings?
A. Acceptable use policy violations
B. Server configuration
C. Chain of custody
D. Data loss incidents

CompTIA A+ 220-1102 (Core 1) Exam

FULL Printable PDF and Software. VALID exam to help you PASS.

comptia-exams

One thought on “Which of the following best practices is MOST important to document throughout the process to maintain integrity of the findings?

  1. C. Chain of custody — Chain of custody is important because if evidence has been altered or it cannot be proven that it was not altered during the time between collection and use in court, then that evidence is less believable or credible than it otherwise would be.

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.