McAfee CCII Exam - Topic 1 Question 17 Discussion

Actual exam question for McAfee's CCII exam

Question #: 17
Topic #: 1

Investigators should always rely on screenshots as primary evidence in cyber investigations.

ATrue

BFalse

Show Suggested Answer

Suggested Answer: B

Screenshots arenot considered primary evidencebecause they can beeasily altered or fabricated. Digital forensic practices require:

Website archive tools (e.g., Wayback Machine).

Metadata analysisfor verification.

Log extractionsfrom web servers.

by Loren at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium CCII Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aracelis

4 months ago

But they can lack context. B) False is safer.

upvoted 0 times

...

Micah

5 months ago

A) True! Screenshots are often clear and direct.

upvoted 0 times

...

Yuette

5 months ago

Agreed! They should be secondary evidence.

upvoted 0 times

...

Lashon

5 months ago

I think it's B) False. Screenshots can be manipulated.

upvoted 0 times

...

Gaynell

5 months ago

True, but they shouldn't be the only source of truth.

upvoted 0 times

...

Graciela

5 months ago

False! They can be misleading without context.

upvoted 0 times

...

Rory

5 months ago

I thought screenshots were solid proof? This is surprising!

upvoted 0 times

...

Elsa

6 months ago

Totally agree, they should be one of many pieces of evidence!

upvoted 0 times

...

Miesha

6 months ago

Screenshots can be manipulated, so not always reliable.

upvoted 0 times

...

Glenn

6 months ago

True, unless the screenshot is of a cat video, then it's just for personal enjoyment.

upvoted 0 times

...

Leonor

6 months ago

I always take screenshots before my morning coffee, just in case.

upvoted 0 times

...

Gerald

7 months ago

Screenshots can be easily manipulated, so they shouldn't be the only form of evidence.

upvoted 0 times

...

Magdalene

7 months ago

False, there are other forms of evidence that should be considered as well.

upvoted 0 times

...

Martha

7 months ago

True, screenshots are the most reliable evidence in cyber investigations.

upvoted 0 times

...

Dortha

7 months ago

I’m a bit confused; I thought screenshots were important, but I also learned that they can be manipulated, so maybe they shouldn't be the only evidence relied upon.

upvoted 0 times

...

Vivan

8 months ago

I feel like the answer might be false because there are other forms of evidence that can be more reliable than just screenshots.

upvoted 0 times

...

Quinn

8 months ago

I think we practiced a similar question, and I recall that screenshots can be useful but might not always be reliable on their own.

upvoted 0 times

...

Gianna

8 months ago

I remember discussing the importance of corroborating evidence, so I'm not sure if screenshots alone can be considered primary evidence.

upvoted 0 times

...

Annmarie

8 months ago

Screenshots can be great, but relying on them exclusively seems risky. I'll make sure to consider all the relevant factors before answering.

upvoted 0 times

...

Laine

8 months ago

I'm a bit confused on this one. I'll need to review my notes on cyber investigation best practices to decide the best approach.

upvoted 0 times

...

Ashlyn

8 months ago

I'm pretty confident this is false. There are other forms of digital evidence that can be just as reliable, if not more so, than screenshots.

upvoted 0 times

...

Roy

9 months ago

Screenshots can be useful, but I'm not sure they should always be the primary evidence. I'll have to weigh the different types of evidence that might be available.

upvoted 0 times

...