Multiple Choice
When undeleting a file in the FAT file system, EnCase will check the _____________ to see if it has already been overwritten.
A) directory entry
B) data on the hard drive
C) deletion table
D) FAT
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q54: An EnCase evidence file of a hard
Q55: When a file is deleted in the
Q56: You are an investigator and have encountered
Q57: The following GREP expression was typed in
Q58: When Unicode is selected for a search
Q60: RAM is used by the computer to:<br>A)
Q61: The signature table data is found in
Q62: Which of the following would be a
Q63: When an EnCase user double-clicks on a
Q64: Select the appropriate name for the highlighted