Which term is the examination of evidence related to criminal activity?

• A. Governance
• B. Forensics
• C. Integrity
• D. Least Privilege

Answer: (B)

The term describes applying scientific methods to analyze and present evidence tied to criminal activity. Forensics covers how evidence is collected, preserved, analyzed, and used in legal proceedings, including both physical items and digital artifacts. In security contexts, it supports incident response by determining what happened, how it happened, and who was involved, while maintaining chain of custody and admissibility in court.

Governance focuses on policy and oversight, integrity on the trustworthiness and accuracy of data, and least privilege on limiting user permissions. These concepts are related to security management, not the analytical examination of criminal evidence.