CISSP Sample Question

QUESTION NO: 13

Which of the following is a problem regarding computer investigation issues?

A. Information is tangible.
B. Evidence is easy to gather.
C. Computer-generated records are only considered secondary evidence, thus are not as reliable
as best evidence.
D. In many instances, an expert or specialist is not required.

Answer: C

Explanation:

Because computer-generated records normally fall under the category of hearsay
evidence because they cannot be proven accurate and reliable this can be a problem.
Under the U.S. Federal Rules of Evidence, hearsay evidence is generally not admissible in court.
This inadmissibility is known as the hearsay rule, although there are some exceptions for how,
when, by whom and in what circumstances data was collected.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten
Domains of Computer Security, John Wiley & Sons, 2001, Chapter 9: Law, Investigation, and
Ethics (page 310).