The best answer is C because CHFI v11 treats eDiscovery as a structured process for handling electronically stored information across its full legal lifecycle, not as a single technical activity. The blueprint specifically includes the eDiscovery process flow, the Electronic Discovery Reference Model cycle, collection methodologies, and best practices for controlling cost and risk. That directly supports the idea that organizations must discover relevant data, preserve and protect it, collect it in a defensible way, review it for relevance, and then present it for legal or regulatory use. Option B sounds partially correct, but admissibility is an outcome supported by proper handling rather than the full definition of the process. Option A is event correlation, which belongs more to forensic analysis and timeline reconstruction. Option D describes incident response activities rather than eDiscovery. In exam terms, whenever the question focuses on preparing emails, chats, application records, and other business data for judicial proceedings, CHFI expects you to think in terms of the EDRM-style workflow. That makes option C the only complete answer aligned with the blueprint objective.