Crucial Technologies is performing a post-incident forensic investigation on a compromised workstation. The physical computer will be transported through several IT staff members before it reaches the secure evidence lab for analysis. Which accompanying document must be updated each time the custody of the system changes hands?
A chain-of-custody log records exactly who has possession of evidence, with the date, time, and purpose of each transfer. Updating this form at every hand-off preserves the integrity and admissibility of the evidence. An incident ticket tracks the event itself, a copy of the hard drive is evidence rather than documentation, and an acceptable use policy is an organizational guideline-not a transfer log.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a chain of custody?
Open an interactive chat with Bash
Why does the chain of custody need to be updated during transfers?
Open an interactive chat with Bash
How is the chain of custody different from an incident ticket?
Open an interactive chat with Bash
CompTIA A+ 220-1102 (V14)
Operational Procedures
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .