Multiple Choice
A suspect typed a file on his computer and saved it to a floppy diskette. The filename was MyNote.txt. You receive the floppy and the suspect computer. The suspect denies that the floppy disk belongs to him. You search the suspect computer an d locate only the filename within a .LNK file. The .LNK file is located in the folder C : \ Windows\Recent. How you would use the .LNK file to establish a connection between the file on the floppy diskette and the suspect computer?
A) The file signature found in the .LNK file
B) The dates and time of the file found in the .LNK file, at file offset 28
C) Both a and b
D) The full path of the file, found in the .LNK file
Correct Answer:
Verified
Correct Answer:
Verified
Q54: You are investigating a case involving fraud.
Q55: Within EnCase, you highlight a range of
Q56: You are at an incident scene and
Q57: Search terms are stored in what .ini
Q58: Within EnCase, what is the purpose of
Q60: Which of the following statements is more
Q61: A SCSI host adapter would most likely
Q62: The Windows 98 Start Menu has a
Q63: The EnCase evidence file is best described
Q64: During the power-up sequence, which of the