Multiple Choice
Before utilizing an analysis technique on computer evidence, the investigator should:
A) Test the technique on simulated evidence in a controlled environment to confirm that the results are consistent.
B) Be trained in the employment of the technique.
C) Neither a or b.
D) Both a and b.
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q109: A standard Windows 98 boot disk is
Q110: When a document is printed using EMF
Q111: If a floppy diskette is in the
Q112: What information in a FAT file system
Q113: In DOS and Windows, how many bytes
Q115: Which statement would most accurately describe a
Q116: EnCase marks a file as overwritten when
Q117: The following GREP expression was typed in
Q118: If a hash analysis is run on
Q119: What are the EnCase configuration .ini files