The Case File Should Be Archived with the Evidence Files

Q69: A hard drive has 8 sectors per

Q70: The spool files that are created during

Q71: Using good forensic practices, when seizing a

Q72: Which of the following is commonly used

Q73: A restored floppy diskette will have the

Q75: A case file can contain _ hard

Q76: To undelete a file in the FAT

Q77: Which of the following aspects of the

Q78: EnCase marks a file as overwritten when

Q79: Creating an image of a hard drive