Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

BCS Exam CISMP-V9 Topic 1 Question 69 Discussion

Actual exam question for BCS's CISMP-V9 exam
Question #: 69
Topic #: 1
[All CISMP-V9 Questions]

When handling and investigating digital evidence to be used in a criminal cybercrime investigation, which of the following principles is considered BEST practice?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

Quinn
19 days ago
Option A is the way to go. Can't have the 'CSI' team messing with the digital evidence, right? That's a recipe for disaster!
upvoted 0 times
...
Gracia
22 days ago
Option D about 'forensically clean' devices is a bit overkill. As long as the evidence is properly handled and documented, that should be sufficient.
upvoted 0 times
...
Tammi
27 days ago
While law enforcement should be involved, I don't think digital evidence can only be handled by them. Trained forensic experts can also handle it properly.
upvoted 0 times
Aleta
3 days ago
B) Acquiring digital evidence can only be carried on digital devices which have been turned off.
upvoted 0 times
...
Diane
16 days ago
A) Digital evidence must not be altered unless absolutely necessary.
upvoted 0 times
...
...
Bette
1 months ago
Option B doesn't seem right. Digital devices can be imaged and analyzed while still powered on, as long as proper precautions are taken.
upvoted 0 times
Jacklyn
23 days ago
A) Digital evidence must not be altered unless absolutely necessary.
upvoted 0 times
...
...
Whitney
2 months ago
I think option A is the best practice. Maintaining the integrity of digital evidence is crucial in a criminal investigation.
upvoted 0 times
Makeda
6 days ago
True, both options A and D are crucial for a successful cybercrime investigation.
upvoted 0 times
...
Yolando
10 days ago
I think option D is also important, ensuring that the digital devices are clean before investigation can prevent contamination.
upvoted 0 times
...
Evan
21 days ago
It's important to follow best practices to avoid any issues with the evidence later on.
upvoted 0 times
...
Carma
25 days ago
I agree, option A ensures that the digital evidence remains intact and unaltered.
upvoted 0 times
...
...
Lenna
2 months ago
I think option D is also important, digital devices must be forensically 'clean' before investigation to ensure accurate results.
upvoted 0 times
...
Ilene
2 months ago
I agree with Gilberto, altering digital evidence can compromise the integrity of the investigation.
upvoted 0 times
...
Gilberto
2 months ago
I think the best practice is option A, digital evidence must not be altered unless absolutely necessary.
upvoted 0 times
...

Save Cancel