Multiple Choice
You are conducting an investigation and have encountered a computer that is running in the field. The operating system is Windows XP. A software program is currently running and is visible on the screen. You should:
A) Navigate through the program and see what the program is all about, then pull the plug.
B) Pull the plug from the back of the computer.
C) Photograph the screen and pull the plug from the back of the computer.
D) Pull the plug from the wall.
Correct Answer:
Verified
Correct Answer:
Verified
Q1: By default, what color does EnCase use
Q2: To later verify the contents of an
Q3: The following keyword was typed in exactly
Q5: The first sector on a volume is
Q6: The FAT in the File Allocation Table
Q7: Searches and bookmarks are stored in the
Q8: When a drive letter is assigned to
Q9: How does EnCase verify that the case
Q10: How many copies of the FAT are
Q11: The EnCase methodology dictates that _ be