Multiple Choice
You are an investigator and have encountered a computer that is running at the home of a suspect. The computer does not appear to be a part of a network. The operating system is Windows XP Home. No programs are visibly running. You should:
A) Pull the plug from the back of the computer.
B) Shut it down with the start menu.
C) Pull the plug from the wall.
D) Turn it off with the power button.
Correct Answer:

Verified
Correct Answer:
Verified
Q51: Select the appropriate name for the highlighted
Q52: EnCase is able to read and examine
Q53: To undelete a file in the FAT
Q54: An EnCase evidence file of a hard
Q55: When a file is deleted in the
Q57: The following GREP expression was typed in
Q58: When Unicode is selected for a search
Q59: When undeleting a file in the FAT
Q60: RAM is used by the computer to:<br>A)
Q61: The signature table data is found in