220-902 – Q214

An employee was arrested after it was determined that an office computer was used for illegal activity that damaged the company. Which of the following MUST be documented on the employee’s computer to ensure the evidence is admissible on court?

A. Software inventory
B. Personality identifiable information
C. Security best practices
D. Chain of custody

Correct Answer: D

Explanation/Reference:
Reference https://epic.org/security/computer_search_guidelines.txt