As an expert witness, you can't testify if you weren't present when the event occurred.

• A. False
• B. True
• C. Not applicable
• D. Indeterminate

Answer: (A)

You don’t have to be present at the event to testify as an expert. In digital forensics, the value of an expert witness comes from applying established methods to the evidence you’ve examined, not from witnessing the event firsthand. By analyzing things like disk images, logs, network captures, and metadata, you can form and explain a well-supported opinion about what happened, the sequence of events, and the impact, all grounded in data and validated procedures. This relies on reliable techniques, proper chain of custody, and the ability to distinguish facts from inferences. So the statement is not correct—the expert can testify without being physically present at the event, as long as the testimony rests on analyzed evidence and sound methodology.