Which of the following should a computer forensics lab used for investigations have?

• A. isolation
• B. restricted access
• C. open access
• D. an entry log

Answer: (B)

Access control in a computer forensics lab is essential to preserve the integrity of evidence and maintain a solid chain of custody. By restricting entry to authorized personnel, only trained and vetted individuals can handle devices, access data, and perform procedures. This minimizes the risk of tampering, contamination, or accidental modification, and it makes it possible to clearly document who interacted with evidence and when. An entry log often accompanies restricted access, providing a verifiable record that supports the chain of custody.

Isolation of the lab from external networks is important for security, but it addresses different risks than who is allowed inside. Open access would undermine the core need to protect evidence.