Discuss WGU Digital Forensics In Cybersecurity (D829) Exam Topic 2 Question 13

Which principle of evidence collection states that access to evidence must be tracked from the time it is seized through its use in court?

AEvidence record

BChain of custody

CEvent log

DAudit log

Suggested Answer: B

Comprehensive and Detailed Explanation From Exact Extract:

The Chain of Custody (CoC) is the documented and unbroken transfer record of evidence handling, from seizure to presentation in court. It ensures that the evidence has been preserved, controlled, and protected from tampering or alteration.

Evidence record documents evidence details but is less formal than CoC.

Event log and audit log are system-generated records and do not replace the formal CoC.

CoC is a fundamental forensic principle as outlined by NIST SP 800-86 and the Scientific Working Group on Digital Evidence (SWGDE) best practices, ensuring evidence admissibility and reliability in legal proceedings.

Get Premium Digital Forensics in Cybersecurity (D829) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Ashton 2 months ago

Definitely B. Without it, evidence can be challenged in court.

Aide 2 months ago

Agreed! Chain of custody ensures evidence integrity.

Ahmed 2 months ago

I think it's B) Chain of custody. It's crucial for legal cases.

Kristian 2 months ago

Yeah, tracking evidence is super important!

Fletcher 2 months ago

Totally with you on B) Chain of custody!

Gregoria 2 months ago

Wait, are we sure it's not D) Audit log?

Kenneth 3 months ago

I thought it was A) Evidence record!

Nichelle 3 months ago

It's definitely B) Chain of custody.

Emilio 3 months ago

I definitely recall that chain of custody is crucial for legal proceedings, so I would go with B) Chain of custody. It’s all about maintaining the integrity of the evidence, right?

Chi 3 months ago

I’m not completely confident, but I feel like it could be A) Evidence record too. It sounds familiar, but I might be mixing it up with something else.

Kristeen 3 months ago

I remember practicing a question about evidence tracking, and I think it was also related to the chain of custody. So, I’m leaning towards B as well.

Talia 4 months ago

I think the answer might be B) Chain of custody, but I'm not entirely sure. We covered it in class, but I get confused with the terms sometimes.

WGU Digital Forensics in Cybersecurity (D829) Exam - Topic 2 Question 13 Discussion