Multiple Choice
The case number in an evidence file can be changed without causing the verification feature to report an error, if:
A) The user utilizes a text editor.
B) The user utilizes the case information editor within EnCase.
C) The evidence file is reacquired.
D) The case information cannot be changed in an evidence file, without causing the verification feature to report an error.
Correct Answer:

Verified
Correct Answer:
Verified
Q39: The EnCase evidence file is best described
Q40: In Windows 98 and ME, Internet based
Q41: Consider the following path in a FAT
Q42: You are assigned to assist with the
Q43: You are investigating a case involving fraud.
Q45: The EnCase methodology dictates that _ be
Q46: Which of the following is found in
Q47: The BIOS chip on an IBM clone
Q48: Which is the proper formula for determining
Q49: A hard drive was imaged using EnCase. The