CISSP – Information Systems Security Management Professional (ISSMP) — Question 53

Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

Answer options

• A. Direct
• B. Circumstantial
• C. Incontrovertible
• D. Corroborating

Correct answer: B

Explanation

Circumstantial evidence is used to suggest a conclusion based on the surrounding facts, making it the correct choice. Direct evidence, on the other hand, directly proves a fact without needing inference. Incontrovertible evidence is absolute and unchallengeable, while corroborating evidence supports a claim but doesn't independently establish it.