CompTIA Cloud+ (CV0-003) — Question 111

A financial industry services firm was the victim of an internal data breach, and the perpetrator was a member of the company's development team. During the investigation. one of the security administrators accidentally deleted the perpetrator’s user data. Even though the data is recoverable, which of the following has been violated?

Answer options

• A. Chain of custody
• B. Evidence acquisition
• C. Containment
• D. Root cause analysis

Correct answer: A

Explanation

The correct answer is A, Chain of custody, because it refers to the process of maintaining and documenting evidence integrity, which was compromised when user data was deleted. Options B and D focus on different aspects of evidence handling and analysis, while C deals with managing the situation post-breach, not the integrity of evidence.