Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 4

A security engineer has a video of a suspect entering a data center that was captured on the same day that files in the same data center were transferred to a competitor.
Which type of evidence is this?

Answer options

• A. best evidence
• B. prima facie evidence
• C. indirect evidence
• D. physical evidence

Correct answer: C

Explanation

The correct answer is C, as the video serves as circumstantial proof linking the suspect to the data transfer incident without directly confirming their involvement. Options A and D refer to types of evidence that establish direct proof, while B is about evidence that is sufficient to establish a fact unless disproven, which does not apply here.