Multiple Choice
You are investigating a case of child pornography on a hard drive containing Windows XP. In the C : \ Documents and Settings\Bad Guy\Local Settings\Temporary Internet Files folder you find three images of child pornography. You find no other copies of the images on the suspect hard drive, and you find no other copies of the filenames. What can be deduced from your findings?
A) The presence and location of the images is strong evidence of possession.
B) The presence and location of the images is not strong evidence of possession.
C) The presence and location of the images proves the images were intentionally downloaded.
D) Both a and c
Correct Answer:
Verified
Correct Answer:
Verified
Q1: In the EnCase environment, the term external
Q2: A personal data assistant was placed in
Q3: The EnCase default export folder is:<br>A) A
Q4: A file extension and signature can be
Q6: What information should be obtained from the
Q7: An evidence file was archived onto five
Q8: If an evidence file has been added
Q9: Calls to the C : \ volume
Q10: The following GREP expression was typed in
Q11: Which of the following selections is NOT