Multiple Choice
Which of the following aspects of the EnCase evidence file can be changed during a reacquire of the evidence file
A) The evidence number
B) The acquisition notes
C) The investigator name
D) None of the above
Correct Answer:

Verified
Correct Answer:
Verified
Related Questions
Q72: Which of the following is commonly used
Q73: A restored floppy diskette will have the
Q74: The case file should be archived with
Q75: A case file can contain _ hard
Q76: To undelete a file in the FAT
Q78: EnCase marks a file as overwritten when
Q79: Creating an image of a hard drive
Q80: The EnCase case file can be best
Q81: Will EnCase allow a user to write
Q82: In the FAT file system, the size