Multiple Choice
The EnCase methodology dictates that ________ be created prior to acquiring evidence.
A) a unique directory on the lab drive for case management
B) a text file for notes
C) an .E01 file on the lab drive
D) All of the above
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q6: The FAT in the File Allocation Table
Q7: Searches and bookmarks are stored in the
Q8: When a drive letter is assigned to
Q9: How does EnCase verify that the case
Q10: How many copies of the FAT are
Q12: A hard drive has been formatted as
Q13: A standard DOS 6.22 boot disk is
Q14: When a file is deleted in the
Q15: A sector on a floppy disk is
Q16: An evidence file was archived onto five