Multiple Choice
This question addresses the EnCase for Windows search process. If a target word is within a logical file, and it begins in cluster 10 and ends in cluster 15 (the word is fragmented) , the search
A) Will find it because EnCase performs a logical search.
B) Will not find it unless slack is checked on the search dialog box.
C) Will not find it because EnCase performs a physical search only.
D) Will not find it because the letters of the keyword are not contiguous.
Correct Answer:

Verified
Correct Answer:
Verified
Q20: The EnCase case file can be best
Q21: The term signature and reader as they
Q22: When can an evidence file containing a
Q23: In the FAT file system, the size
Q24: The FAT in the File Allocation Table
Q26: RAM is an acronym for:<br>A) Random Addressable
Q27: Search terms are stored in what .ini
Q28: The end of a logical file to
Q29: Will EnCase allow a user to write
Q30: A SCSI host adapter would most likely