During evidence transport, which practice helps preserve integrity?

Enhance your knowledge as a Computer Hacking Forensic Investigator with the CHFI v11 Test. Use flashcards and multiple-choice questions, complete with hints and detailed explanations, to prepare effectively and ace your exam!

Multiple Choice

During evidence transport, which practice helps preserve integrity?

Explanation:
Maintaining evidence integrity during transport relies on a clear chain-of-custody and tamper-evident seals. By documenting every transfer—who handled the item, when, where, and for what purpose—and applying seals that show if the container has been opened, you create an auditable trail that proves the evidence remained untouched or any access was authorized. This combination makes it possible to verify authenticity and admissibility in court, and it helps resolve disputes about potential tampering or mishandling. Re-imaging before transport can introduce changes to the evidence and isn’t necessary for preserving the original’s integrity during transit. Allowing unlogged handling removes accountability, defeating the purpose of an intact custody trail. Encrypting backups protects data at rest but doesn’t establish the physical chain of custody for the original evidence during transport.

Maintaining evidence integrity during transport relies on a clear chain-of-custody and tamper-evident seals. By documenting every transfer—who handled the item, when, where, and for what purpose—and applying seals that show if the container has been opened, you create an auditable trail that proves the evidence remained untouched or any access was authorized. This combination makes it possible to verify authenticity and admissibility in court, and it helps resolve disputes about potential tampering or mishandling.

Re-imaging before transport can introduce changes to the evidence and isn’t necessary for preserving the original’s integrity during transit. Allowing unlogged handling removes accountability, defeating the purpose of an intact custody trail. Encrypting backups protects data at rest but doesn’t establish the physical chain of custody for the original evidence during transport.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy