Bird
0
0

If a forensic examiner unintentionally changes metadata such as a file timestamp during evidence handling, what is the best corrective action?

medium🧠 Conceptual Q6 of 15
Cybersecurity - Digital Forensics
If a forensic examiner unintentionally changes metadata such as a file timestamp during evidence handling, what is the best corrective action?
AModify all other files to match the timestamp
BDelete the altered evidence and start over
CIgnore the change since it is minor
DDocument the change and preserve the original evidence copy
Step-by-Step Solution
Solution:

  1. Step 1: Recognize accidental alteration

    Metadata changes can affect evidence integrity.

  2. Step 2: Document the incident

    Recording the change maintains transparency and trustworthiness.

  3. Step 3: Preserve original evidence

    Keep an unaltered copy for reference and validation.

  4. Final Answer:

    Document the change and preserve the original evidence copy -> Option D

  5. Quick Check:

    Always document errors and keep original evidence safe [OK]
Quick Trick: Record mistakes and keep original evidence intact [OK]
Common Mistakes:
MISTAKES
  • Discarding evidence after accidental changes
  • Ignoring metadata alterations
  • Trying to alter other files to cover mistakes

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes
Advanced Threat Protection - Endpoint Detection and Response (EDR) - Quiz 10hard Advanced Threat Protection - Malware analysis basics - Quiz 3easy Compliance and Governance - SOC 2 compliance - Quiz 14medium Compliance and Governance - Risk assessment methodologies - Quiz 9hard Emerging Security Topics - Supply chain security - Quiz 11easy Incident Response - Containment strategies - Quiz 4medium Security Architecture and Design - Network segmentation - Quiz 10hard Security Architecture and Design - Defense in depth strategy - Quiz 7medium Security Architecture and Design - Secure SDLC practices - Quiz 5medium Security Architecture and Design - Threat modeling (STRIDE, DREAD) - Quiz 2easy