Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which of the following preliminary pieces of information at the crime scene is not helpful for an investigating officer in further analysis?

  1. Witnesses who saw the incident occur

  2. People who do not know about the incident's occurrence

  3. Existing security footage of the area

  4. Physical evidence present at the scene

The correct answer is: People who do not know about the incident's occurrence

The most helpful preliminary pieces of information for an investigating officer include eyewitnesses who have seen the incident occur, existing security footage, and physical evidence present at the scene. Each of these elements provides critical context and direct evidence related to the incident, facilitating a more thorough investigation. Witnesses who saw the incident provide testimonies that can clarify the sequence of events and identify key details. Security footage acts as an objective source, capturing the incident as it unfolded and potentially corroborating witness statements. Physical evidence, such as fingerprints or weapons, offers tangible proof that can be analyzed and linked to specific individuals or actions. In contrast, individuals who do not know about the incident's occurrence do not contribute any pertinent information regarding what happened. Their lack of awareness means they cannot provide useful details for the investigation, making them less significant in the context of gathering information to analyze and resolve the incident. The presence of such individuals may occupy time and resources unnecessarily without aiding the investigation's goals.