A financial industry services firm was the victim of an internal data breach, and the perpetrator was a member of the company's development team. During the investigation, one of the security administrators accidentally deleted the perpetrator's user data. Even though the data is recoverable, which of the following has been violated?
Correct Answer: A
The chain of custody is a process that documents and preserves the integrity and authenticity of evidence from the time it is collected until it is presented in court. The chain of custody includes information such as who collected, handled, stored, or transferred the evidence, when and where it was done, and how it was done. By accidentally deleting the perpetrator's user data, the security administrator has violated the chain of custody, as the evidence has been altered or destroyed and can no longer be used in court. Reference: [CompTIA Cloud+ Certification Exam Objectives], Domain 2.0 Security, Objective 2.4 Given a scenario, implement security automation and orchestration in a cloud environment.