Multiple Choice
Will EnCase allow a user to write data into an acquired evidence file?
A) No. Data cannot be added to the evidence file after the acquisition is made.
B) Yes, but only bookmarks.
C) Yes, but only case information.
D) No, unless the user established a writing privilege when the evidence was acquired.
E) Yes, but only to resize the partitions.
Correct Answer:

Verified
Correct Answer:
Verified
Q24: The FAT in the File Allocation Table
Q25: This question addresses the EnCase for Windows
Q26: RAM is an acronym for:<br>A) Random Addressable
Q27: Search terms are stored in what .ini
Q28: The end of a logical file to
Q30: A SCSI host adapter would most likely
Q31: How does EnCase verify that the case
Q32: In hexadecimal notation, one byte is represented
Q33: During the power-up sequence, which of the
Q34: A physical file size is:<br>A) The total