CompTIA Security+ (SY0-601) — Question 137

A systems analyst is responsible for generating a new digital forensics chain-of-custody form. Which of the following should the analyst include in this documentation? (Choose two.)

Answer options

• A. The order of volatility
• B. A CRC32 checksum
• C. The provenance of the artifacts
• D. The vendor’s name
• E. The date and time
• F. A warning banner

Correct answer: C, E

Explanation

The correct answers, C and E, are essential as they provide critical information about the origin of the artifacts and the timing of their collection, respectively. Options A, B, D, and F, while relevant in forensics, do not directly pertain to the necessary elements of a chain-of-custody form.