McAfee Exam CCII Topic 1 Question 5 Discussion

Actual exam question for McAfee's CCII exam

Question #: 5
Topic #: 1

[All CCII Questions]

Computer-generated evidence is always suspect because of the ease with which it can be altered, usually without a trace.

ATrue

BFalse

Show Suggested Answer

Suggested Answer: A

Computer-generated evidence must bevalidatedbefore being used in court. Forensic experts employ:

Hashing techniques-- MD5, SHA-256 for data integrity.

Digital signatures and timestamps-- Ensuring authenticity.

Audit trails and access logs-- Tracking modifications.

Without proper validation,altered evidencecan mislead investigations.

McAfee Institute Cyber Evidence Authentication Guide

DOJ Cybercrime Evidence Validation Protocols

Federal Digital Forensic Examination Manual

by Iluminada at Mar 22, 2025, 10:32 PM

Limited Time Offer

25%

Off

Get Premium CCII Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Casey

2 days ago

Haha, this question is as outdated as a floppy disk. Next they'll be asking about the trustworthiness of carrier pigeons as evidence. Times have changed, folks!

upvoted 0 times

...

Stefan

3 days ago

True, absolutely. My grandma could forge a better digital signature than this 'evidence' they're trying to pass off. No way I'm falling for that!

upvoted 0 times

...

Alpha

5 days ago

False, technology has advanced so much that digital forensics can detect even the slightest alteration. You can't fool me with your 'altered without a trace' nonsense!

upvoted 0 times

...

Nancey

10 days ago

I think computer-generated evidence can be altered easily.

upvoted 0 times

...

Trina

14 days ago

I agree, computer-generated evidence can be easily manipulated. Better to rely on good old-fashioned handwritten notes and Polaroid photos!

upvoted 0 times

Glenna

1 hours ago

A) True

upvoted 0 times

...