CompTIA A+ Core 2 (220-1102) — Question 227

A technician needs to document who had possession of evidence at every step of the process. Which of the following does this process describe?

Answer options

• A. Rights management
• B. Audit trail
• C. Chain of custody
• D. Data integrity

Correct answer: C

Explanation

The correct answer is C, Chain of custody, as it specifically refers to the process of documenting the handling of evidence to maintain its integrity in legal contexts. Options A (Rights management) and D (Data integrity) relate to data security and protection but do not pertain to evidence handling. Option B (Audit trail) involves tracking actions within systems but does not focus strictly on evidence possession.