[Cisspstudy] Clarification Please

[Kristy Seaton]

Phillip, this is why "overthinking" is never a good thing. I know
because I do it all the time.  :)  The CISSP is designed for
"understanding" not just content. (i.e. Does one understand the
concept of the evidence life cycle, not just the steps involved". Hope
this helps.  Kristy

On 6/22/09, Sergio Pantoja <spantoja at gmail.com> wrote:
> Like you said all alternatives are part of the ELC.
>
> But considering the she is "reviewing" the case a night before the trial.
> Discovery is definitively one step that at this specific point is not
> applicable, you can only review something that was previously discovered.
>
> Regards.
>
>
> On Sun, Jun 21, 2009 at 12:45 PM, Lamey, Phillip
> <phillip.lamey at cgi.com>wrote:
>
>>  But the question VERY specifically asks “What step listed below would not
>> be part of the evidence life cycle?”.
>>
>>
>>
>> Discovery is definitely part of that life cycle … we can’t just discount
>> is
>> as being part of the life cycle because it is not applicable that
>> particular
>> morning …
>>
>>
>>
>> Man … maybe I think too much … I could be in trouble on this exam :S
>>
>>
>>
>> Phil Lamey
>>
>>
>>
>> *From:* cisspstudy-bounces at cccure.org [mailto:
>> cisspstudy-bounces at cccure.org] *On Behalf Of *Kristy Seaton
>> *Sent:* Sunday, June 21, 2009 1:40 PM
>> *To:* The CISSP Study Mailing list
>> *Subject:* Re: [Cisspstudy] Clarification Please
>>
>>
>>
>> If she is looking over the case the night before the trial, i can kind of
>> understand how discovery would not be part of the evidence life cycle at
>> this point. During the trial, the collection, identification and storage
>> of
>> evidence will come under attack and be more closely scrutinized than the
>> actual discovery of the "crime".
>>
>> This is just my thought processes this morning. I will have to think about
>> it a little more.
>>
>> This is where it is very important to read and process the questions first
>> during the test.
>>
>> Kristy
>>
>> On Sat, Jun 20, 2009 at 1:23 PM, Lamey, Phillip <phillip.lamey at cgi.com>
>> wrote:
>>
>> Shon Harris describes
>>
>>
>>
>> Evidence Life Cycle as:
>>
>>      - Discovery
>>             - Protection
>>             - Recording
>>             - Collection and Identification
>>
>>
>>      - Identification = tagging, labeling and marking
>>
>>
>>      - Analysis
>>             - Storage, preservation
>>             - Transportation
>>             - Present in court
>>             - Return to owner
>>
>>
>>
>>
>>
>> However, on a practice test I got the question below …
>>
>>
>>
>>
>>
>>
>>
>> I answered Identification because Collection and Identification are listed
>> as one bullet and Collection comes first.  Pretty poor reasoning but to my
>> thinking there are none in that list that are not part of the evidence
>> lifecycle.
>>
>>
>>
>> Could someone please clarify this for me?
>>
>>
>>
>> Thank you,
>>
>>
>>
>> Phil Lamey, P.Eng.
>>
>> *CGI Senior Consultant*
>>
>> *(506) 458-5020 ext. 5121*
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> cisspstudy mailing list
>> cisspstudy at cccure.org
>> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>>
>>
>>
>>
>> --
>> "Wisdom is not a product of schooling, but of the lifelong attempt to
>> acquire it."
>>
>> - Albert Einstein
>>
>> _______________________________________________
>> cisspstudy mailing list
>> cisspstudy at cccure.org
>> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>>
>>
>
>
> --
> Sergio Pantoja H.
> spantoja at gmail.com
> System, Network and Security Administrator
> Linux User register #239475
> Mandrake Club Member
>


-- 
"Wisdom is not a product of schooling, but of the lifelong attempt to
acquire it."

- Albert Einstein