Multiple Choice
The EnCase evidence file is best described as:
A) A bit stream image of the source hard drive written to the corresponding sectors of the target hard drive.
B) A clone of the source hard drive.
C) A bit stream image of the source hard drive written to a file, or several file segments.
D) A sector-by-sector copy of the source hard drive written to the corresponding sectors of the target hard drive.
Correct Answer:

Verified
Correct Answer:
Verified
Q34: A physical file size is:<br>A) The total
Q35: A FAT directory has as a logical
Q36: Which of the following selections would be
Q37: What does the acronym BIOS stand for?<br>A)
Q38: An Enhanced Metafile would best be described
Q40: In Windows 98 and ME, Internet based
Q41: Consider the following path in a FAT
Q42: You are assigned to assist with the
Q43: You are investigating a case involving fraud.
Q44: The case number in an evidence file