Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


What practice should a first responder avoid when packaging forensic evidence?

  1. Use of antishock packing materials

  2. Labeling containers with evidence details

  3. Securing evidence in tamper-proof bags

  4. Using archival quality materials for storage

The correct answer is: Use of antishock packing materials

The correct choice highlights the importance of not using antishock packing materials when packaging forensic evidence. Antishock materials are often designed to absorb impacts and provide cushioning; however, their fibers and properties can potentially contaminate the evidence or obscure critical traces. Forensic evidence must be handled, stored, and transported in a manner that preserves its integrity, and the use of such materials can lead to unintended alterations of the evidence, which could compromise a case in court. In contrast, labeling containers with evidence details is crucial for proper documentation and chain of custody. Securely packaging evidence in tamper-proof bags ensures that the evidence remains uncontaminated and any tampering can be easily identified. Likewise, using archival quality materials for storage is essential for long-term preservation of evidence, as these materials minimize deterioration and prevent chemical reactions that could damage the evidence over time. Each of these practices contributes to maintaining the integrity and reliability of evidence needed in investigations and legal proceedings.