Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

BCS Exam CISMP-V9 Topic 1 Question 69 Discussion

Actual exam question for BCS's CISMP-V9 exam
Question #: 69
Topic #: 1
[All CISMP-V9 Questions]

When handling and investigating digital evidence to be used in a criminal cybercrime investigation, which of the following principles is considered BEST practice?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

Quinn
3 months ago
Option A is the way to go. Can't have the 'CSI' team messing with the digital evidence, right? That's a recipe for disaster!
upvoted 0 times
...
Gracia
3 months ago
Option D about 'forensically clean' devices is a bit overkill. As long as the evidence is properly handled and documented, that should be sufficient.
upvoted 0 times
Scot
1 months ago
I agree, proper handling and documentation are key in cybercrime investigations.
upvoted 0 times
...
Silvana
1 months ago
C) Digital evidence can only be handled by a member of law enforcement.
upvoted 0 times
...
Cristen
2 months ago
A) Digital evidence must not be altered unless absolutely necessary.
upvoted 0 times
...
Anglea
2 months ago
Option D is important to ensure the integrity of the evidence.
upvoted 0 times
...
Heike
2 months ago
B) Acquiring digital evidence can only be carried on digital devices which have been turned off.
upvoted 0 times
...
Virgie
2 months ago
A) Digital evidence must not be altered unless absolutely necessary.
upvoted 0 times
...
...
Tammi
3 months ago
While law enforcement should be involved, I don't think digital evidence can only be handled by them. Trained forensic experts can also handle it properly.
upvoted 0 times
Celestine
2 months ago
Trained forensic experts can also handle digital evidence properly.
upvoted 0 times
...
Aleta
3 months ago
B) Acquiring digital evidence can only be carried on digital devices which have been turned off.
upvoted 0 times
...
Diane
3 months ago
A) Digital evidence must not be altered unless absolutely necessary.
upvoted 0 times
...
...
Bette
4 months ago
Option B doesn't seem right. Digital devices can be imaged and analyzed while still powered on, as long as proper precautions are taken.
upvoted 0 times
Fidelia
2 months ago
Option B doesn't seem right. Digital devices can be imaged and analyzed while still powered on, as long as proper precautions are taken.
upvoted 0 times
...
Gracie
2 months ago
B) Acquiring digital evidence can only be carried on digital devices which have been turned off.
upvoted 0 times
...
Jacklyn
3 months ago
A) Digital evidence must not be altered unless absolutely necessary.
upvoted 0 times
...
...
Whitney
4 months ago
I think option A is the best practice. Maintaining the integrity of digital evidence is crucial in a criminal investigation.
upvoted 0 times
Makeda
3 months ago
True, both options A and D are crucial for a successful cybercrime investigation.
upvoted 0 times
...
Yolando
3 months ago
I think option D is also important, ensuring that the digital devices are clean before investigation can prevent contamination.
upvoted 0 times
...
Evan
3 months ago
It's important to follow best practices to avoid any issues with the evidence later on.
upvoted 0 times
...
Carma
3 months ago
I agree, option A ensures that the digital evidence remains intact and unaltered.
upvoted 0 times
...
...
Lenna
4 months ago
I think option D is also important, digital devices must be forensically 'clean' before investigation to ensure accurate results.
upvoted 0 times
...
Ilene
5 months ago
I agree with Gilberto, altering digital evidence can compromise the integrity of the investigation.
upvoted 0 times
...
Gilberto
5 months ago
I think the best practice is option A, digital evidence must not be altered unless absolutely necessary.
upvoted 0 times
...

Save Cancel