Computer Hacking Forensic Investigator (CHFI) V11 Practice Test

During the cataloging of digital evidence, what is the primary objective?

Make bit-stream images of all hard drives Preserve evidence integrity Not remove the evidence from the scene Not allow the computer to be turned off

Correct Answer:

Preserve evidence integrity

Explanation:

The main concept being tested is preserving evidence integrity. When cataloging digital evidence, the goal is to create a precise, verifiable record of what was found, where it came from, its condition, and how it has been handled, so the evidence remains unchanged and trustworthy from collection to presentation. This includes documenting metadata (such as device type and identifiers), recording the chain of custody, and using hash values to prove the data hasn’t been altered. While other actions like imaging drives or keeping a system powered on are part of the broader process, the cataloging step specifically focuses on ensuring the evidence remains authentic and traceable.

Access more questions from this quiz

Continue to Computer Hacking Forensic Investigator (CHFI) v11 Practice Test for more practice questions and the full quiz experience.

Access More Questions