Multiple Choice
The case number in an evidence file can be changed without causing the verification feature to report an error, if:
A) The user utilizes a text editor.
B) The case information cannot be changed in an evidence file, without causing the verification feature to report an error.
C) The user utilizes the case information editor within EnCase.
D) The evidence file is reacquired.
Correct Answer:

Verified
Correct Answer:
Verified
Q27: When can an evidence file containing a
Q28: A personal data assistant was placed in
Q29: What information in a FAT file system
Q30: In DOS acquisition mode, if a physical
Q31: When handling computer evidence, an investigator should:<br>A)
Q33: When a non-compressed evidence file is reacquired
Q34: For an EnCase evidence file acquired with
Q35: Assume that MyNote.txt was allocated to clusters
Q36: All investigators using EnCase should run tests
Q37: A CPU is:<br>A) A chip that would