Multiple Choice
The EnCase methodology dictates that the lab drive for evidence have a __________ prior to making an image.
A) NTFS partition
B) unique volume label
C) FAT 16 partition
D) bare, unused partition
Correct Answer:

Verified
Correct Answer:
Verified
Related Questions
Q115: Which statement would most accurately describe a
Q116: EnCase marks a file as overwritten when
Q117: The following GREP expression was typed in
Q118: If a hash analysis is run on
Q119: What are the EnCase configuration .ini files
Q121: A SCSI drive is pinned as a
Q122: By default, what color does EnCase use
Q123: Search results are found in which of
Q124: The Windows 98 Start Menu has a
Q125: Creating an image of a hard drive