_______________ is simply the application of Computer Investigation and analysis techniques in the interests of determining potential legal evidence.

• A. Network Forensics
• B. Computer Forensics
• C. Incident Response
• D. Event Reaction

Answer: (B)

Computer forensics is the application of investigation and analysis techniques to digital data in order to uncover information that could be used as legal evidence. This field focuses on systematically identifying, preserving, collecting, analyzing, and presenting digital artifacts in a way that ensures their integrity and admissibility in court, including maintaining a proper chain of custody and using repeatable, forensically sound methods. The statement aligns with this definition because it describes applying computer investigation and analysis to determine potential legal evidence. Distinct options like network forensics deal primarily with network data and traffic, incident response centers on detecting and containing security incidents, and “event reaction” is not a standard term in this context, so they do not define the full discipline as accurately as computer forensics.