Certified Incident Handler (CIH) Practice Ecam

Which field of a chain of custody document contains information on the physical location of evidence during its extraction?

1. Handler Information

2. Chain of Custody Number

3. Location of Evidence

4. Transfer Details

The correct answer is: Location of Evidence

The correct choice focuses on the field of the chain of custody document that specifically details where the evidence is situated throughout the evidence collection process. The "Location of Evidence" field provides critical information regarding the physical site from which evidence was extracted or stored during an investigation. This is essential for maintaining an unbroken chain of custody, as it ensures that the evidence can be traced back to its origin, which is crucial for preserving the integrity of the evidence and supporting its legal admissibility. Other fields, such as Handler Information or Transfer Details, while important, do not provide the necessary specifics about the physical location of the evidence itself. The Handler Information would typically contain details about the individuals who handled the evidence, while Transfer Details would outline the records related to the movement of the evidence from one location to another. The Chain of Custody Number is a unique identifier for tracking the evidence but does not convey the physical location. Hence, the specificity of the "Location of Evidence" in documenting the physical whereabouts of evidence during extraction makes it the correct choice.