EC-Council 312-49 Exam - Topic 3 Question 100 Discussion

Actual exam question for EC-Council's 312-49 exam

Question #: 100
Topic #: 3

In a computer forensics investigation, what describes the route that evidence takes from the time you find it until the case is closed or goes to court?

Arules of evidence

Blaw of probability

Cchain of custody

Dpolicy of separation

Show Suggested Answer

Suggested Answer: C

by Karan at Aug 15, 2026, 12:20 PM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Peggie

3 days ago

Rules of evidence are important too, but they come after the chain of custody.

upvoted 0 times

...

Francesco

8 days ago

C makes the most sense, but I wonder about the other options.

upvoted 0 times

...

Rueben

14 days ago

Wait, is it really that important? I thought it was just a formality.

upvoted 0 times

...

Cory

19 days ago

Agreed! Chain of custody is crucial for evidence integrity.

upvoted 0 times

...

Dulce

24 days ago

It's definitely C) chain of custody.

upvoted 0 times

...

Glen

29 days ago

I’m torn between chain of custody and rules of evidence. I wish I had reviewed those definitions more closely before the exam.

upvoted 0 times

...

Jutta

1 month ago

Chain of custody definitely seems like the right term. We had a similar question about how evidence is tracked during an investigation.

upvoted 0 times

...

Mitsue

1 month ago

I remember discussing the rules of evidence, but I feel like that’s more about how evidence is used in court rather than the route it takes.

upvoted 0 times

...

Paris

1 month ago

I think the answer might be chain of custody, but I’m not completely sure. It sounds familiar from our last practice exam.

upvoted 0 times

...