CSP Evidence Preservation & Chain of Custody 2

Question 1

When a surveillance officer transfers digital video footage to an investigator, which action is MOST critical to maintaining chain of custody?

Accepted Answer

Completing a signed transfer log with date, time, and parties involved

Answer

A signed transfer log documenting the date, time, and identities of all parties creates the auditable record required for chain of custody integrity.

Question 2

A security officer discovers that a chain of custody form is missing one signature from an intermediate handler. What is the BEST course of action?

Accepted Answer

Document the gap, attempt to obtain the missing signature, and notify the supervisor

Answer

Documenting the discrepancy, attempting to correct it, and notifying a supervisor preserves transparency and may salvage the evidence's admissibility.

Question 3

Which term describes the process of creating a unique digital fingerprint to verify that electronic evidence has not been altered?

Accepted Answer

Hashing

Answer

Hashing (e.g., MD5 or SHA-256) generates a unique value for a file; any alteration changes the hash, proving tampering.

Question 4

In the context of evidence preservation, what does 'write protection' on a storage device prevent?

Accepted Answer

Accidental or intentional modification of stored data

Answer

Write protection blocks any new data from being written to the device, ensuring the original evidence remains unaltered.

Question 5

A chain of custody document should be started at which point in the evidence-handling process?

Accepted Answer

At the moment the evidence is first identified and collected

Answer

Chain of custody must begin at the moment of collection to account for the evidence from its very first point of contact.

(CSP) Certified Surveillance Professional Practice Test

(CSP) Certified Surveillance Professional Practice Test

CSP Evidence Preservation & Chain of Custody 2