An evidence file was archived onto five CD-Rom disks with the third file segment on disk number three. Can the contents of the third file segment be verified by itself while still on the CD?
A) No. Archived files are compressed and cannot be verified until un-archived.
B) No. All file segments must be put back together.
C) Yes. Any segment of an evidence file can be verified through re-computing and comparing the CRCs, even if it is on a CD.
D) No. EnCase cannot verify files on CDs.
Correct Answer:
Verified
Q12: A standard DOS 6.22 boot disk is
Q13: The case file should be archived with
Q14: What information in a FAT file system
Q15: A signature analysis has been run on
Q16: Using good forensic practices, when seizing a
Q18: EnCase can build a hash set of
Q19: The following GREP expression was typed in
Q20: Which of the following items could contain
Q21: A restored floppy diskette will have the
Q22: The EnCase evidence file logical filename can
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents