Multiple Choice
Will EnCase allow a user to write data into an acquired evidence file
A) Yes, but only bookmarks.
B) Yes, but only to resize the partitions.
C) No. Data cannot be added to the evidence file after the acquisition is made.
D) Yes, but only case information.
E) No, unless the user established a writing privilege when the evidence was acquired.
Correct Answer:

Verified
Correct Answer:
Verified
Q76: To undelete a file in the FAT
Q77: Which of the following aspects of the
Q78: EnCase marks a file as overwritten when
Q79: Creating an image of a hard drive
Q80: The EnCase case file can be best
Q82: In the FAT file system, the size
Q83: Within EnCase, what is purpose of the
Q84: By default, what color does EnCase use
Q85: To undelete a file in the FAT
Q86: The term signature and header as they