Computer Hacking Forensic Investigator (CHFI v10) — Question 593

A digital forensics lab is working on a high-profile cybercrime case. The director has decided to include a new team member in the investigation team for his specialized expertise. Which of the following considerations should be considered in the context of maintaining the lab’s integrity, based on the given information?

Answer options

• A. The new team member should be directly handed the original hardware containing the evidence
• B. The new team member should be allowed to bring his own hardware and software tools to the lab for investigation
• C. The new team member should be given immediate access to the lab without maintaining a visitor's log register
• D. The new team member should be provided with an electronic sign-in pass, and his entry should be logged in the register

Correct answer: D

Explanation

Option D is correct because maintaining a log of entries helps ensure accountability and traceability in the investigation process, which is vital for preserving the integrity of the evidence. In contrast, options A and B could compromise the evidence's integrity by allowing uncontrolled access or unverified tools, while option C neglects proper record-keeping that is essential for security and tracking who accesses the lab.