Which of the following is the MOST important reason for using a chain of custody from?
Correct Answer: A
The most important reason for using a chain of custody form is to document those who were in possession of the evidence at every point in time. A chain of custody form is a document that records the details of how, when, where, and by whom the evidence was collected, handled, stored, transferred, and analyzed. A chain of custody form helps to establish the integrity and authenticity of the evidence, and to prevent any tampering, alteration, or loss of the evidence. A chain of custody form also supports the admissibility of the evidence in a court of law, by showing that the evidence has been preserved and protected from the time of collection to the time of presentation. To collect records of all digital forensic professionals working on a case, to document collected digital evidence, and to ensure that digital evidence is not overlooked during the analysis are not the most important reasons for using a chain of custody form, although they may be some of the benefits or objectives of using a chain of custody form.
Question 292
Which of the following is less likely to accompany a contingency plan, either within the plan itself or in the form of an appendix?
Correct Answer: D
You use the BIA as a guideline to create the contingency plan.
Question 293
Which of the following techniques is known to be effective in spotting resource exhaustion problems, especially with resources such as processes, memory, and connections?
Correct Answer: A
Section: Software Development Security
Question 294
Program change controls must ensure that all changes are
Correct Answer: B
Document of the change. Once the change is approved, it should be entered into a change log and the log should be updated as the process continues toward completion. Tested and presented. The change must be fully tested to uncover any unforeseen results. Depending on the severity of the change and the company's organization, the change and implementation may need to be presented to a change control committee. This helps show different sides to the purpose and outcome of the change and the possible ramifications. - Shon Harris All-in-one CISSP Certification Guide pg 815
Question 295
Which of the following uses the destination IP address to forward packets?
Correct Answer: C
A router is a network device that uses the destination IP address to forward packets. An IP address is a logical address that identifies a device or a network on the Internet. A router can connect multiple networks and route packets between them based on the IP address of the destination device or network. A router can also perform other functions, such as network address translation (NAT), firewall, quality of service (QoS), and routing protocols. The other options are not network devices that use the destination IP address to forward packets, as they either operate at a lower layer of the network, use a different type of address, or do not forward packets at all. References: CISSP - Certified Information Systems Security Professional, Domain 4. Communication and Network Security, 4.1 Implement secure design principles in network architectures, 4.1.1 Apply secure design principles to network architecture, 4.1.1.1 OSI and TCP/IP models; CISSP Exam Outline, Domain 4. Communication and Network Security, 4.1 Implement secure design principles in network architectures, 4.1.1 Apply secure design principles to network architecture, 4.1.1.1 OSI and TCP/IP models