What is the primary purpose of maintaining a chain of custody during a digital forensic investigation?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because chain of custody documents every person who handled evidence, when, and why, ensuring evidence admissibility in court by proving it was not tampered with. A is wrong because speed is not the purpose of chain of custody documentation.
Full explanation below image
Full Explanation
B is correct because chain of custody documents every person who handled evidence, when, and why, ensuring evidence admissibility in court by proving it was not tampered with. A is wrong because speed is not the purpose of chain of custody documentation. C is wrong because backup copies are a separate practice from chain of custody, though they can be part of evidence handling. D is wrong because SLA compliance is a business process concern, not the legal evidentiary purpose of chain of custody.