Multiple Choice
The EnCase methodology dictates that the lab drive for evidence have a __________ prior to making an image.
A) FAT 16 partition
B) NTFS partition
C) unique volume label
D) bare, unused partition
Correct Answer:

Verified
Correct Answer:
Verified
Related Questions
Q88: The following GREP expression was typed in
Q89: In Windows, the file MyNote.txt is deleted
Q90: You are assigned to assist with the
Q91: Which of the following items could contain
Q92: 4 bits allows what number of possibilities?<br>A)
Q94: The MD5 hash algorithm produces a _
Q95: A hash library would most accurately be
Q96: The results of a hash analysis on
Q97: Assume that an evidence file is added
Q98: A signature analysis has been run on