Multiple Choice
When undeleting a file in the FAT file system, EnCase will check the _____________ to see if it has already been overwritten.
A) data on the hard drive
B) deletion table
C) directory entry
D) FAT
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q92: 4 bits allows what number of possibilities?<br>A)
Q93: The EnCase methodology dictates that the lab
Q94: The MD5 hash algorithm produces a _
Q95: A hash library would most accurately be
Q96: The results of a hash analysis on
Q97: Assume that an evidence file is added
Q98: A signature analysis has been run on
Q100: The following GREP expression was typed in
Q101: RAM is an acronym for:<br>A) Random Addressable
Q102: In Windows 2000 and XP, which of