Multiple Choice
Assume that an evidence file is added to a case, the case is saved, and the case is closed. What happens if the evidence file is moved, and the case is then opened?
A) EnCase reports that the file integrity has been compromised and renders the file useless.
B) EnCase opens the case, excluding the moved evidence.
C) EnCase asks for the location of the evidence file the next time the case is opened.
D) EnCase reports a different hash value for the evidence file.
Correct Answer:

Verified
Correct Answer:
Verified
Q92: 4 bits allows what number of possibilities?<br>A)
Q93: The EnCase methodology dictates that the lab
Q94: The MD5 hash algorithm produces a _
Q95: A hash library would most accurately be
Q96: The results of a hash analysis on
Q98: A signature analysis has been run on
Q99: When undeleting a file in the FAT
Q100: The following GREP expression was typed in
Q101: RAM is an acronym for:<br>A) Random Addressable
Q102: In Windows 2000 and XP, which of