Computer Hacking Forensic Investigator (CHFI v10) — Question 215

A computer forensics investigator or forensic analyst is a specially trained professional who works with law enforcement as well as private businesses to retrieve information from computers and other types of data storage devices. For this, the analyst should have an excellent working knowledge of all aspects of the computer. Which of the following is not a duty of the analyst during a criminal investigation?

Answer options

• A. To recover data from suspect devices
• B. To fill the chain of custody
• C. To create an investigation report
• D. To enforce the security of all devices and software in the scene

Correct answer: D

Explanation

The correct answer is D because enforcing security measures is typically the responsibility of security personnel, not forensic analysts. Analysts focus on data recovery, maintaining chain of custody, and documenting their findings in investigation reports, which are essential for legal processes.