An incident response technician collected a mobile device during an investigation. Which of the following should the technician do to maintain chain of custody?
A.
Document the collection and require a sign-off when possession changes.
B.
Lock the device in a safe or other secure location to prevent theft or alteration.
C.
Place the device in a Faraday cage to prevent corruption of the data.
D.
Record the collection in a blockchain-protected public ledger.
Maintaining proper documentation of the collection and ensuring that there is a clear chain of custody is essential for preserving the integrity and admissibility of evidence. The technician should document details such as the date, time, location, and individuals involved in the collection process. Each time the possession of the device changes hands, it should be properly recorded and acknowledged by the parties involved. This helps establish a clear trail of custody, ensuring that the device's integrity is maintained and that the evidence collected is reliable.
A. Document the collection and require a sign-off when possession changes is the correct option to maintain chain of custody when collecting a mobile device during an investigation. It is important to document the collection process, including who collected the device, when and where it was collected, and any other relevant details. It is also necessary to require a sign-off when possession changes, to ensure accountability and track the device's movement. This helps maintain the integrity of the evidence and ensures that it can be used in legal proceedings. The other options do not address chain of custody properly, as they either focus on physical security (B and C) or use a technology that may not be appropriate for the situation (D).
This section is not available anymore. Please use the main Exam Page.SY0-601 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
T4IT
Highly Voted 2 years, 1 month agoApplebeesWaiter1122
Most Recent 1 year, 10 months agoSophyQueenCR82
2 years agoi_luv_stoneface
2 years, 2 months agoJibz18
2 years, 2 months ago