CompTIA A+ Core 2 (220-1102) — Question 434

A technician needs to track evidence for a forensic investigation on a Windows computer. Which of the following describes this process?

Answer options

• A. Valid license
• B. Data retention requirements
• C. Material safety data sheet
• D. Chain of custody

Correct answer: D

Explanation

The correct answer is D, Chain of custody, as it refers to the documentation that tracks the handling of evidence in a forensic investigation. Options A, B, and C do not relate to forensic evidence management; they pertain to licensing, data management policies, and safety information, respectively.