Multiple Choice
Assume that an evidence file is added to a case, the case is saved, and the case is closed. What happens if the evidence file is moved, and the case is then opened?
A) EnCase reports that the file integrity has been compromised and renders the file useless.
B) EnCase asks for the location of the evidence file the next time the case is opened.
C) EnCase reports a different hash value for the evidence file.
D) EnCase opens the case, excluding the moved evidence.
Correct Answer:

Verified
Correct Answer:
Verified
Q74: For an EnCase evidence file acquired with
Q75: In Windows, the file MyNote.txt is deleted
Q76: The first sector on a hard drive
Q77: The acronym ASCII stands for:<br>A) American Standard
Q78: Within EnCase, what is purpose of the
Q80: When an EnCase user double-clicks on a
Q81: If cases are worked on a lab
Q82: An evidence file can be moved to
Q83: Hash libraries are commonly used to:<br>A) Compare
Q84: A case file can contain _ hard