During evidence transport, which practice helps preserve integrity?

Prepare for the Computer Hacking Forensic Investigator v11 exam. Study with flashcards and multiple choice questions. Each question includes hints and explanations. Get exam-ready efficiently!

Multiple Choice

During evidence transport, which practice helps preserve integrity?

Explanation:
Maintaining evidence integrity during transport relies on a clear chain-of-custody and tamper-evident seals. By documenting every transfer—who handled the item, when, where, and for what purpose—and applying seals that show if the container has been opened, you create an auditable trail that proves the evidence remained untouched or any access was authorized. This combination makes it possible to verify authenticity and admissibility in court, and it helps resolve disputes about potential tampering or mishandling. Re-imaging before transport can introduce changes to the evidence and isn’t necessary for preserving the original’s integrity during transit. Allowing unlogged handling removes accountability, defeating the purpose of an intact custody trail. Encrypting backups protects data at rest but doesn’t establish the physical chain of custody for the original evidence during transport.

Maintaining evidence integrity during transport relies on a clear chain-of-custody and tamper-evident seals. By documenting every transfer—who handled the item, when, where, and for what purpose—and applying seals that show if the container has been opened, you create an auditable trail that proves the evidence remained untouched or any access was authorized. This combination makes it possible to verify authenticity and admissibility in court, and it helps resolve disputes about potential tampering or mishandling.

Re-imaging before transport can introduce changes to the evidence and isn’t necessary for preserving the original’s integrity during transit. Allowing unlogged handling removes accountability, defeating the purpose of an intact custody trail. Encrypting backups protects data at rest but doesn’t establish the physical chain of custody for the original evidence during transport.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy