CompTIA CySA+ (CS0-001) — Question 54

A security analyst is assisting with a computer crime investigation and has been asked to secure a PC and deliver it to the forensic lab. Which of the following items would be MOST helpful to secure the PC? (Choose three.)

Answer options

• A. Tamper-proof seals
• B. Faraday cage
• C. Chain of custody form
• D. Drive eraser
• E. Write blockers
• F. Network tap
• G. Multimeter

Correct answer: A, B, C

Explanation

Tamper-proof seals help to prevent any unauthorized access to the PC, while a Faraday cage protects it from electromagnetic interference that could alter evidence. The chain of custody form is crucial for maintaining the integrity of the evidence, ensuring that all handling is documented. The other options, such as drive erasers and write blockers, do not provide the same level of protection for the evidence during transport.