Question

question # 9
multiple choice
which of the following things does not assist in making computer forensic evidence admissible to the courts?
authenticating the evidence, verifying that nothing on the hard drive was altered during the investigation
having another person in the room at all times
duplicating the hard-drive files
copying the hard-drive files

Explanation:

To determine which option does not assist in making computer forensic evidence admissible, we analyze each:

• Authenticating evidence (verifying no alteration) is crucial for admissibility as it ensures the evidence's integrity.
• Duplicating or copying hard - drive files (creating forensic images) is a standard practice to preserve the original evidence, which is necessary for admissibility.
• Having another person in the room at all times does not directly relate to the legal requirements (like chain of custody, integrity, or authenticity of the evidence) for making computer forensic evidence admissible in court.

Answer:

B. having another person in the room at all times