McAfee Exam CCII Topic 1 Question 5 Discussion

Actual exam question for McAfee's CCII exam

Question #: 5
Topic #: 1

[All CCII Questions]

Computer-generated evidence is always suspect because of the ease with which it can be altered, usually without a trace.

ATrue

BFalse

Show Suggested Answer

Suggested Answer: A

Computer-generated evidence must bevalidatedbefore being used in court. Forensic experts employ:

Hashing techniques-- MD5, SHA-256 for data integrity.

Digital signatures and timestamps-- Ensuring authenticity.

Audit trails and access logs-- Tracking modifications.

Without proper validation,altered evidencecan mislead investigations.

McAfee Institute Cyber Evidence Authentication Guide

DOJ Cybercrime Evidence Validation Protocols

Federal Digital Forensic Examination Manual

by Iluminada at Mar 22, 2025, 10:32 PM

Limited Time Offer

25%

Off

Get Premium CCII Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joana

11 days ago

I think it's false because there are tools and techniques to detect alterations in computer-generated evidence.

upvoted 0 times

...

Jannette

12 days ago

I believe it's true that computer-generated evidence is suspect.

upvoted 0 times

...

Elena

17 days ago

I disagree, there are ways to verify the authenticity of computer-generated evidence.

upvoted 0 times

...

Judy

18 days ago

True, I've seen enough crime shows to know that digital evidence is as reliable as a politician's promise. Can't trust anything these days!

upvoted 0 times

...

Casey

23 days ago

Haha, this question is as outdated as a floppy disk. Next they'll be asking about the trustworthiness of carrier pigeons as evidence. Times have changed, folks!

upvoted 0 times

...

Stefan

24 days ago

True, absolutely. My grandma could forge a better digital signature than this 'evidence' they're trying to pass off. No way I'm falling for that!

upvoted 0 times

...

Alpha

26 days ago

False, technology has advanced so much that digital forensics can detect even the slightest alteration. You can't fool me with your 'altered without a trace' nonsense!

upvoted 0 times

...