Computer Hacking Forensic Investigator (CHFI v10) — Question 65

Which of the following should a computer forensics lab used for investigations have?

Answer options

• A. isolation
• B. restricted access
• C. open access
• D. an entry log

Correct answer: B

Explanation

A computer forensics lab must have restricted access to ensure that only authorized personnel can enter, thereby protecting the integrity of the evidence. Isolation is important but does not guarantee limited access, while open access could compromise investigations. An entry log is useful but does not address the necessity of restricted access itself.