Multiple Choice
To later verify the contents of an evidence file 7RODWHUYHULI\WKHFRQWHQWVRIDQHYLGHQFHILOH
A) EnCase writes a CRC value for every 64 sectors copied.
B) EnCase writes a CRC value for every 128 sectors copied.
C) EnCase writes an MD5 hash value every 64 sectors copied.
D) EnCase writes an MD5 hash value for every 32 sectors copied.
Correct Answer:
Verified
Correct Answer:
Verified
Q1: By default, what color does EnCase use
Q3: The following keyword was typed in exactly
Q4: You are conducting an investigation and have
Q5: The first sector on a volume is
Q6: The FAT in the File Allocation Table
Q7: Searches and bookmarks are stored in the
Q8: When a drive letter is assigned to
Q9: How does EnCase verify that the case
Q10: How many copies of the FAT are
Q11: The EnCase methodology dictates that _ be