For an EnCase evidence file acquired with a hash value to pass verification, which of the following must be true?
A) The MD5 hash value must verify.
B) The CRC values must verify.
C) The CRC values and the MD5 hash value both must verify.
D) Either the CRC or MD5 hash values must verify.
Correct Answer:
Verified
Q48: Within EnCase, you highlight a range of
Q49: Which of the following would most likely
Q50: The Windows 98 Start Menu has a
Q51: Which of the following would be a
Q52: To undelete a file in the FAT
Q54: Will EnCase allow a user to write
Q55: When a drive letter is assigned to
Q56: A SCSI host adapter would most likely
Q57: In Windows, the file MyNote.txt is deleted
Q58: A case file can contain _ hard
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents