Which of the following elements of digital forensics should a company use if it needs to ensure the integrity of evidence?
Choose an answer
Tap an option to check your answer.
Correct answer: Preservation.
Why this is the answer
Preservation is the correct answer because it focuses on maintaining the original state of digital evidence without alteration. This is crucial for ensuring integrity, as any change could compromise the evidence's admissibility in legal or disciplinary proceedings. E-discovery is a broader process of identifying and producing electronic documents in legal cases, not specifically about integrity. Acquisition refers to the process of collecting the evidence, which is part of preservation but not the overarching principle for integrity. Containment is an incident response step to limit the scope of an attack, not a digital forensics element for ensuring evidence integrity.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed