CompTIA Security+ (SY0-701) — Question 382

Which of the following elements of digital forensics should a company use if it needs to ensure the integrity of evidence?

Answer options

• A. Preservation
• B. E-discovery
• C. Acquisition
• D. Containment

Correct answer: A

Explanation

The correct answer is A, Preservation, as it involves maintaining the integrity of evidence throughout the investigation process. E-discovery, Acquisition, and Containment are important processes, but they do not directly ensure that the evidence remains unaltered or intact.