512-50 practice question 14 of 35

The process for identifying, collecting, and producing digital information in support of legal proceedings is called

Full set: 404 questions
Answer options
A: chain of custody.
B: electronic discovery. Correct answer
C: evidence tampering.
D: electronic review.
Correct Answer:
B. electronic discovery.
Explanation

Electronic discovery (e-discovery) is the term for the entire process related to identifying, preserving, collecting, processing, reviewing, analyzing, and producing electronically stored information (ESI) in the context of legal or governmental proceedings. It is a formal, multi-step process governed by rules of civil procedure. The goal is to produce relevant digital evidence in a legally defensible manner, which is precisely what the question describes.

Why Incorrect

A. chain of custody: This is a critical component within the e-discovery and digital forensics process, documenting evidence handling, but it is not the name for the entire process.
C. evidence tampering: This is the illegal act of altering or destroying evidence, the opposite of the proper procedure described.
D. electronic review: This is just one specific phase of the larger e-discovery process where collected information is examined for relevance and privilege.

References

- The Sedona Conference. (2017). The Sedona Principles, Third Edition: Best Practices Recommendations & Principles for Addressing Electronic Document Production. Principle 1 describes the scope of electronic discovery.

- U.S. Courts. (2006). Federal Rules of Civil Procedure, Rule 26(b)(2)(B). This rule specifically addresses the discovery of electronically stored information, forming the legal basis for e-discovery in U.S. federal courts.

- Kent, K., Chevalier, S., Grance, T., & Dang, H. (2006). NIST Special Publication 800-86: Guide to Integrating Forensic Techniques into Incident Response. Section 2.2 discusses the collection of evidence, a key part of the e-discovery process.

Scroll to Top