D
Secondary evidence is a copy of evidence or oral description of its contents; not as reliable as best evidence Here are other types of evidence: Best evidenceoriginal or primary evidence rather than a copy of duplicate of the evidence Direct evidenceproves or disproves a specific act through oral testimony based on information gathered through the witnesss five senses Conclusive evidenceincontrovertible; overrides all other evidence Opinionstwo types: Expertmay offer an opinion based on personal expertise and facts, Non-expertmay testify only as to facts Circumstantial evidenceinference of information from other, immediate, relevant facts Corroborative evidencesupporting evidence used to help prove an idea or point; used as a supplementary tool to help prove a primary piece of evidence Hearsay evidence (3rdparty)oral or written evidence that is presented in court that is second hand and has no firsthand proof of accuracy or reliability (i) Usually not admissible in court (ii) Computer generated records and other business records are in hearsay category (iii) Certain exceptions to hearsay rule: (1) Made during the regular conduct of business and authenticated by witnesses familiar with their use (2) Relied upon in the regular course of business (3) Made by a person with knowledge of records (4) Made by a person with information transmitted by a person with knowledge (5) Made at or near the time of occurrence of the act being investigated (6) In the custody of the witness on a regular basis Reference: KRUTZ, Ronald L. & VINES, Russel
D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 310. and CISSP for Dummies, Peter Gregory, page 270-271