CSI Evidence Collection & Chain of Custody 2

Question 1

What information must be recorded on an evidence tag at the time of collection?

Accepted Answer

Date, time, location, description, and collector's name

Answer

An evidence tag must capture the essential facts of collection — who, what, where, and when — to establish and maintain chain of custody.

Question 2

Which of the following best describes 'locard's exchange principle' and its relevance to evidence collection?

Accepted Answer

Every contact leaves a trace, meaning physical evidence is often transferred between a subject and a scene

Answer

Locard's Exchange Principle holds that any physical interaction leaves microscopic evidence behind, forming the scientific basis for trace evidence collection.

Question 3

When transferring evidence to another investigator or storage facility, what document must accompany it?

Accepted Answer

An evidence transfer log signed by both the releasing and receiving parties

Answer

A transfer log with signatures from both parties creates a documented, unbroken chain of custody during handoffs.

Question 4

What is the correct procedure when a security investigator discovers that evidence has been tampered with during storage?

Accepted Answer

Document the discovery, notify supervisors, and preserve the compromised evidence as a new finding

Answer

Tampering must be documented immediately and reported; the compromised evidence itself becomes relevant to the investigation of the tampering.

Question 5

For how long should a security investigator generally retain evidence after a case is closed?

Accepted Answer

According to the organization's retention policy and applicable legal requirements

Answer

Retention periods vary by jurisdiction, type of case, and organizational policy, and may extend for years if appeals or litigation are possible.

(CSI) Certified Security Investigator Practice Test

(CSI) Certified Security Investigator Practice Test

CSI Evidence Collection & Chain of Custody 2