CompTIA Security+ (SY0-601) — Question 349

A systems analyst is responsible for generating a new digital forensics chain-of-custody form. Which of the following should the analyst include in this documentation? (Choose two).

Answer options

• A. The order of volatility
• B. A forensics NDA
• C. The provenance of the artifacts
• D. The vendor's name
• E. The date and time
• F. A warning banner

Correct answer: C, E

Explanation

The correct answers, C and E, are essential as they provide critical information about the artifacts' origin and the exact date and time of the evidence collection. Options A, B, D, and F, while relevant in certain contexts, do not directly pertain to the key elements required for effective documentation in a chain-of-custody form.